Skip to content

Commit 6fadcc5

Browse files
committed
Treat empty fields in seLinuxOptions as uncomparable
1 parent a1bc015 commit 6fadcc5

File tree

1 file changed

+1
-1
lines changed
  • keps/sig-storage/1710-selinux-relabeling

1 file changed

+1
-1
lines changed

keps/sig-storage/1710-selinux-relabeling/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -610,7 +610,7 @@ Drawbacks:
610610
KCM often runs in a container and does not have access to `/etc/selinux` on the worker nodes.
611611
As consequence, two labels that are equivalent from the SELinux point of view, may be reported as different, such as these two `seLinuxOptions` snippets: `{"type": "container_t", "level": "s0:c10,c0"}` and `{"level": "s0:c10,c1"}`.
612612
`container_t` is the default type label for containers on Fedora, so kubelet is able to fill it in the `seLinuxOptions` when it is not set and see they're equivalent.
613-
KCM does not know the default on nodes and treats these `seLinuxOptions` as different.
613+
KCM does not know the default on nodes and treats empty fields in `seLinuxOptions` as *uncomparable* - it does not emit any event in the above example.
614614

615615
### Implementation phases
616616

0 commit comments

Comments
 (0)