Skip to content

Commit 087e57d

Browse files
kvapskvaps
committed
add: disable-selinux workaround
Signed-off-by: Andrei Kvapil <[email protected]>
1 parent c6edf6c commit 087e57d

1 file changed

Lines changed: 41 additions & 0 deletions

File tree

‎packages/system/kubevirt/templates/disable-selinux-workaround.yaml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
# See:
2+
# - https://github.com/siderolabs/talos/issues/10083
3+
---
4+
apiVersion: apps/v1
5+
kind: DaemonSet
6+
metadata:
7+
name: disable-selinux
8+
namespace: cozy-kubevirt
9+
labels:
10+
app: disable-selinux
11+
spec:
12+
selector:
13+
matchLabels:
14+
app: disable-selinux
15+
template:
16+
metadata:
17+
labels:
18+
app: disable-selinux
19+
spec:
20+
containers:
21+
- command:
22+
- sh
23+
- -exc
24+
- test -f /host/sys/fs/selinux/enforce && mount -t tmpfs tmpfs /host/sys/fs/selinux; sleep infinity
25+
image: docker.io/library/alpine
26+
name: mount
27+
securityContext:
28+
privileged: true
29+
volumeMounts:
30+
- mountPath: /host
31+
mountPropagation: Bidirectional
32+
name: host-root
33+
hostIPC: true
34+
hostNetwork: true
35+
hostPID: true
36+
tolerations:
37+
- operator: Exists
38+
volumes:
39+
- hostPath:
40+
path: /
41+
name: host-root

0 commit comments

Comments
 (0)