mirror of
				https://github.com/optim-enterprises-bv/kubernetes.git
				synced 2025-11-04 04:08:16 +00:00 
			
		
		
		
	e2e_node: use kubelet_exec_t instead of bin_t for kubelet
as bin_t isn't powerful enough, and we run into a wack-a-mole situation making bin_t powerful enough for the tests Signed-off-by: Peter Hunt <pehunt@redhat.com>
This commit is contained in:
		@@ -130,7 +130,7 @@ func osSpecificActions(args, host, workspace string) (string, error) {
 | 
				
			|||||||
// kubelet on Fedora CoreOS distribution
 | 
					// kubelet on Fedora CoreOS distribution
 | 
				
			||||||
func setKubeletSELinuxLabels(host, workspace string) error {
 | 
					func setKubeletSELinuxLabels(host, workspace string) error {
 | 
				
			||||||
	cmd := getSSHCommand(" && ",
 | 
						cmd := getSSHCommand(" && ",
 | 
				
			||||||
		fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "kubelet")),
 | 
							fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t kubelet_exec_t %s", filepath.Join(workspace, "kubelet")),
 | 
				
			||||||
		fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "e2e_node.test")),
 | 
							fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "e2e_node.test")),
 | 
				
			||||||
		fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "ginkgo")),
 | 
							fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "ginkgo")),
 | 
				
			||||||
		fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "mounter")),
 | 
							fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "mounter")),
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user