From e1873ab872891bd122cd8ee136a22b327ea6908f Mon Sep 17 00:00:00 2001
From: chenguoquan1024 <67669059+chenguoquan1024@users.noreply.github.com>
Date: Wed, 15 Jul 2020 15:22:38 +0800
Subject: [PATCH] add calico-node selinux (#6359)
---
roles/network_plugin/calico/templates/calico-node.yml.j2 | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/roles/network_plugin/calico/templates/calico-node.yml.j2 b/roles/network_plugin/calico/templates/calico-node.yml.j2
index 1cb80f312..981b9fc38 100644
--- a/roles/network_plugin/calico/templates/calico-node.yml.j2
+++ b/roles/network_plugin/calico/templates/calico-node.yml.j2
@@ -57,6 +57,8 @@ spec:
name: host-local-net-dir
- mountPath: /host/opt/cni/bin
name: cni-bin-dir
+ securityContext:
+ privileged: true
{% endif %}
# This container installs the Calico CNI binaries
# and CNI network config file on each node.
@@ -88,6 +90,8 @@ spec:
name: cni-net-dir
- mountPath: /host/opt/cni/bin
name: cni-bin-dir
+ securityContext:
+ privileged: true
{% endif %}
containers:
{% if calico_version is version('v3.3.0', '>=') and calico_version is version('v3.4.0', '<') %}
--
GitLab