Hi list, romana is an add-on to kubernetes to install a SDN.
https://github.com/romana/romana Currently it does not work with SELinux: it installs a host mount from /var/lib/romana without the pod without a transition. In the toy cluster created by kubeadm something similar is need as it uses the host's /var/lib/etcd. However kubeadm use a spc_t hammer in its manifest. I have communicated to the romana devs via their slack channel and they are asking what is the best practice or recommendation? The current romana spec file is from: https://github.com/romana/romana/blob/master/containerize/specs/romana-kubeadm.yml A sample of the hosts mounts: volumes: - name: romana-data hostPath: path: "/var/lib/romana" - name: etcd-data hostPath: path: "/var/lib/romana/etcd-db" - name: mysql-data hostPath: path: "/var/lib/romana/mysql-db" - name: log-path hostPath: path: /var/log/romana Anthony