Loading...

XML

Word

Printable

Severity:
Important
Regression:
No
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Release Note Text:

Hide
* Previously, the kubelet was running with the `unconfined_service_t` SELinux type. As a consequence, all our plugins failed to deploy due to an Selinux denial. With this fix, the kubelet now runs with the `kubelet_exec_t` SELinux type. As a result, plugins deploy as expected. (link:https://issues.redhat.com/browse/OCPBUGS-20022[*~~OCPBUGS-20022~~*])

Show
* Previously, the kubelet was running with the `unconfined_service_t` SELinux type. As a consequence, all our plugins failed to deploy due to an Selinux denial. With this fix, the kubelet now runs with the `kubelet_exec_t` SELinux type. As a result, plugins deploy as expected. (link: https://issues.redhat.com/browse/OCPBUGS-20022 [* OCPBUGS-20022 *])
Release Note Type:
Bug Fix
Release Note Status:
Done
Target Version:

4.15.0

This is a clone of issue OCPBUGS-25362. The following is the description of the original issue:
—
Description of problem:

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:

    1.
    2.
    3.

Actual results:

Expected results:

Additional info:

blocks

OCPBUGS-26551 Set the correct kubelet wrapper selinux permissions within MCO

clones

OCPBUGS-25362 Set the correct kubelet wrapper selinux permissions within MCO

is blocked by

OCPBUGS-25362 Set the correct kubelet wrapper selinux permissions within MCO

is cloned by

OCPBUGS-26551 Set the correct kubelet wrapper selinux permissions within MCO

is depended on by

OCPBUGS-22270 SELinux: kubelet running with wrong label [4.14.z]

links to

RHSA-2023:7198 OpenShift Container Platform 4.15 security update

(2 links to)