issue 8249: disable selinux relabel for backupPod (#8250)

Signed-off-by: Lyndon-Li <[email protected]>
vmware-tanzu · Sep 27, 2024 · 0ccdc7c · 0ccdc7c
1 parent aab2140
commit 0ccdc7c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/exposer/csi_snapshot.go b/pkg/exposer/csi_snapshot.go
@@ -546,6 +546,9 @@ func (e *csiSnapshotExposer) createBackupPod(
 			RestartPolicy:                 corev1.RestartPolicyNever,
 			SecurityContext: &corev1.PodSecurityContext{
 				RunAsUser: &userID,
+				SELinuxOptions: &corev1.SELinuxOptions{
+					Type: "spc_t",
+				},
 			},
 		},
 	}