Feature Overview (aka. Goal Summary)

Currently,  LVMS uses "chcon -R "for applying selinux context which is problematic for PVs with large number of files.  There is a new  approach by applying the selinux context at mount time instead, which should be used by LVMS, too.

Goals (aka. expected user outcomes)

The new approach is GA for RWOP access mode in 4.16 BUT the driver has to expose it see https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1710-selinux-relabeling#csi-driver-considerations

To goal of this feature is to support selinux mount options for RWOP PVs and expose it as required.

Requirements (aka. Acceptance Criteria):

see goals

Questions to Answer (Optional):

1. Analyse the potential impact for existing PV / PVCs - do we need a migration strategy?

Out of Scope

Other access modes besides RWOP

Background

see linked spike on initial feasibility analysis which had a positive outcome.

Customer Considerations

n/a

Documentation Considerations

1. probably no docs needed, just a release note entry
2. add it to the list of OCP drivers that have it enabled https://docs.openshift.com/container-platform/4.16/storage/understanding-persistent-storage.html#pv-access-modes_understanding-persistent-storage

Interoperability Considerations

none