Ooops - that should read "Currently it does not work with SELinux: it installs a host mount from /var/lib/romana inside the pod without a transition."
romana devs ask: "adding those three lines (to) romana-services and romana-agent would fix it, but is it better to be more specific? (spc = super-privileged container. happy to go with spc_t if there's no other suggestion)" The "three lines" refers to what kubeadm's etcd pod uses, viz., securityContext: seLinuxOptions: type: spc_t Any advice is greatly appreciated. Anthony