website/content/en/docs/reference/command-line-tools-reference/feature-gates/SELinuxChangePolicy.md

734 B

title content_type _build stages
SELinuxChangePolicy feature_gate
list render
never false
stage defaultValue fromVersion toVersion
alpha false 1.32 1.32
stage defaultValue fromVersion
beta true 1.33

Enables spec.securityContext.seLinuxChangePolicy field. This field can be used to opt-out from applying the SELinux label to the pod volumes using mount options. This is required when a single volume that supports mounting with SELinux mount option is shared between Pods that have different SELinux labels, such as a privileged and unprivileged Pods.

Enabling the SELinuxChangePolicy feature gate requires the feature gate SELinuxMountReadWriteOncePod to be enabled.