website/content/en/docs/reference/command-line-tools-reference/feature-gates/SELinuxChangePolicy.md

25 lines
734 B
Markdown

---
title: SELinuxChangePolicy
content_type: feature_gate
_build:
list: never
render: false
stages:
- stage: alpha
defaultValue: false
fromVersion: "1.32"
toVersion: "1.32"
- stage: beta
defaultValue: true
fromVersion: "1.33"
---
Enables `spec.securityContext.seLinuxChangePolicy` field.
This field can be used to opt-out from applying the SELinux label to the pod
volumes using mount options. This is required when a single volume that supports
mounting with SELinux mount option is shared between Pods that have different
SELinux labels, such as a privileged and unprivileged Pods.
Enabling the `SELinuxChangePolicy` feature gate requires the feature gate `SELinuxMountReadWriteOncePod` to
be enabled.