Loading...

XML

Word

Printable

Type: Bug
Resolution: Done-Errata
Priority: Normal
Fix Version/s: 4.14.z
Affects Version/s: 4.14.z
Component/s: Node / Kubelet
Labels:
- triaged

Regression:
No
Release Blocker:
Rejected
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Release Note Text:
Fix a bug where the kubelet has the wrong SELinux label
Release Note Type:
Bug Fix
Target Version:

4.14.z

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:
PX Priority Data:
PX Review Complete:

Update container-selinux to container-selinux-2.223.0-1 or beyond to address:
https://github.com/containers/container-selinux/pull/277
https://issues.redhat.com/browse/OCPBUGS-20022

clones

OCPBUGS-20022 SELinux: kubelet running with wrong label

Closed

depends on

OCPBUGS-25948 Set the correct kubelet wrapper selinux permissions within MCO

Closed

OCPBUGS-26551 Set the correct kubelet wrapper selinux permissions within MCO

Closed

is blocked by

RHEL-3128 grant access to unprivileged containers to the kubelet podresources socket

Closed

is cloned by

OCPBUGS-22272 SELinux: kubelet running with wrong label [4.13.z]

Closed

is depended on by

OCPBUGS-22272 SELinux: kubelet running with wrong label [4.13.z]

Closed

links to

RHBA-2024:0837 OpenShift Container Platform 4.14.z bug fix update

RHEA-2023:7198 rpm

(1 is depended on by, 2 links to)

Assignee:: Peter Hunt

Reporter:: Bertrand Rault

QA Contact:: Min Li

Votes:: 0 Vote for this issue

Watchers:: 11 Start watching this issue

Created:: 2023/10/23 4:16 PM

Updated:: 2024/02/20 3:27 PM

Resolved:: 2024/02/20 3:27 PM