SELinux support (#122)

* SELinux support Add support to the chart to set the SELinux context to enable a working system. Enable it by default on OpenShift clusters. Signed-off-by: Kevin Fox <[email protected]> * Incorperate feedback Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2023-12-07 11:02:06 -08:00
parent c017d82594
commit 13f6028ccd
4 changed files with 45 additions and 23 deletions
@@ -64,24 +64,3 @@ tornjak-frontend:
    runAsUser: null
    runAsGroup: null
    fsGroup: null
-
-spiffe-csi-driver:
-  initContainers:
-    - terminationMessagePath: /dev/termination-log
-      name: set-context
-      command:
-        - chcon
-        - '-Rvt'
-        - container_file_t
-        - spire-agent-socket/
-      securityContext:
-        capabilities:
-          drop:
-            - all
-        privileged: true
-      imagePullPolicy: Always
-      volumeMounts:
-        - name: spire-agent-socket-dir
-          mountPath: /spire-agent-socket
-      terminationMessagePolicy: File
-      image: 'registry.access.redhat.com/ubi9:latest'