issue 8249: disable selinux relabel for backupPod (vmware-tanzu#350)

Signed-off-by: Lyndon-Li <lyonghui@vmware.com> Co-authored-by: Lyndon-Li <lyonghui@vmware.com>
kaovilai · Sep 27, 2024 · 4e93a36 · 4e93a36
1 parent 9224463
commit 4e93a36
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/exposer/csi_snapshot.go b/pkg/exposer/csi_snapshot.go
@@ -546,6 +546,9 @@ func (e *csiSnapshotExposer) createBackupPod(
 			RestartPolicy:                 corev1.RestartPolicyNever,
 			SecurityContext: &corev1.PodSecurityContext{
 				RunAsUser: &userID,
+				SELinuxOptions: &corev1.SELinuxOptions{
+					Type: "spc_t",
+				},
 			},
 		},
 	}