734 B
734 B
title | content_type | _build | stages | ||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
SELinuxChangePolicy | feature_gate |
|
|
Enables spec.securityContext.seLinuxChangePolicy
field.
This field can be used to opt-out from applying the SELinux label to the pod
volumes using mount options. This is required when a single volume that supports
mounting with SELinux mount option is shared between Pods that have different
SELinux labels, such as a privileged and unprivileged Pods.
Enabling the SELinuxChangePolicy
feature gate requires the feature gate SELinuxMountReadWriteOncePod
to
be enabled.