Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SELinux policy interfering with EBS CSI driver #975

Closed
bcressey opened this issue Jul 7, 2020 · 0 comments · Fixed by #983
Closed

SELinux policy interfering with EBS CSI driver #975

bcressey opened this issue Jul 7, 2020 · 0 comments · Fixed by #983
Assignees
@bcressey
Labels
type/bug Something isn't working
Milestone
v0.4.1

Comments

@bcressey
Copy link
Contributor

bcressey commented Jul 7, 2020

What I expected to happen:
The EBS CSI driver should be able to mount volumes.

What actually happened:
The SELinux policy is preventing the mount:

[ 6656.438188] audit: type=1400 audit(1594163691.743:131): avc:  denied  { mount } for
pid=78643 comm="mount" name="/" dev="nvme2n1" ino=2
scontext=system_u:system_r:container_t:s0
tcontext=system_u:object_r:any_t:s0 tclass=filesystem
permissive=0

How to reproduce the problem:
Attempt to use the EBS CSI driver with v0.4.0.
@bcressey bcressey self-assigned this Jul 7, 2020
@bcressey bcressey added the type/bug Something isn't working label Jul 7, 2020
@bcressey bcressey added this to the v0.4.1 milestone Jul 7, 2020
@bcressey bcressey mentioned this issue Jul 10, 2020
Merged
@bcressey bcressey linked a pull request Jul 10, 2020 that will close this issue
fix CSI drivers and kaniko #983
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bcressey bcressey

Labels
type/bug Something isn't working
Projects
None yet
Milestone
v0.4.1
Development

Successfully merging a pull request may close this issue.

fix CSI drivers and kaniko bcressey/bottlerocket
1 participant
@bcressey