Ooops - that should read

"Currently it does not work with SELinux: it installs a host mount from
/var/lib/romana inside the  pod without a transition."

romana devs ask: "adding those three lines (to) romana-services and romana-agent
would fix it, but is it better to be more specific?
(spc = super-privileged container. happy to go with spc_t if there's no other 
suggestion)"

The "three lines" refers to what kubeadm's etcd pod uses, viz., 
securityContext:
    seLinuxOptions:
      type: spc_t


Any advice is greatly appreciated.

Anthony

Reply via email to