Skip to content
This repository has been archived by the owner on Oct 26, 2023. It is now read-only.

Commit

Permalink
selinux: add current flannel limitation
Browse files Browse the repository at this point in the history 
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
  • Loading branch information
@tormath1
tormath1 committed Feb 22, 2022
1 parent cb1d8ad commit f77a06f
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion docs/setup/security/selinux.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,9 @@ Now, edit `/etc/selinux/config` to replace `SELINUX=permissive` with `SELINUX=en

## Limitations

SELinux enforcement is currently incompatible with Btrfs volumes and volumes that are shared between multiple containers.
* SELinux enforcement is currently incompatible with Btrfs volumes and volumes that are shared between multiple containers.
* Starting from Flannel-0.15 installed via `kube-flannel.yml`, SELinux enforcement will prevent the CNI installation on the host. (See: [flatcar-linux/Flatcar#635][flannel-issue])


[gh-flatcar]: https://github.com/kinvolk/Flatcar/issues
[flannel-issue]: https://github.com/flatcar-linux/Flatcar/issues/635

0 comments on commit f77a06f

Please sign in to comment.