Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kubeadm: add logic to enforce SELinux for Cilium CNI in Flatcar >= 3745 #461

Merged
merged 5 commits into from
Oct 10, 2023
Merged

kubeadm: add logic to enforce SELinux for Cilium CNI in Flatcar >= 3745 #461

merged 5 commits into from
Oct 10, 2023

Commits on Oct 10, 2023

  1. platform: change signature of RuntimeConf to get a pointer 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    fa87c37 View commit details
    Browse the repository at this point in the history

  2. platform: add RuntimeConf method to the Cluster interface 

    Adding this method allows to access the runtime configuration in a test
to get/set values based on some conditions.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    35f0437 View commit details
    Browse the repository at this point in the history

  3. kubeadm: add logic to enforce SELinux for Cilium CNI in Flatcar >= 3745 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    1d7ef28 View commit details
    Browse the repository at this point in the history

  4. kubeadm/cilium: patch Cilium daemon set 

    This is required even with Permissive mode. Can be dropped once `spc_t`
is supported on Flatcar.

Picked-From: e8e9751
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    ef60b06 View commit details
    Browse the repository at this point in the history

  5. kubeadm: apply Cilium patch only when container_t is unavailable 

    container_t brings 'spc_t' too which is required by Cilium. We patch the
daemon-set only when the old label ('svirt_lxc_file_t') is detected.

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    daead39 View commit details
    Browse the repository at this point in the history