From 0ccdc7c6e1a968d24c841a7c0b1e64349390b91a Mon Sep 17 00:00:00 2001
From: lyndon-li <98304688+Lyndon-Li@users.noreply.github.com>
Date: Fri, 27 Sep 2024 23:57:29 +0800
Subject: [PATCH] issue 8249: disable selinux relabel for backupPod (#8250)

Signed-off-by: Lyndon-Li <lyonghui@vmware.com>
---
 pkg/exposer/csi_snapshot.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkg/exposer/csi_snapshot.go b/pkg/exposer/csi_snapshot.go
index 4dcc50d129..3d2890cb71 100644
--- a/pkg/exposer/csi_snapshot.go
+++ b/pkg/exposer/csi_snapshot.go
@@ -546,6 +546,9 @@ func (e *csiSnapshotExposer) createBackupPod(
 			RestartPolicy:                 corev1.RestartPolicyNever,
 			SecurityContext: &corev1.PodSecurityContext{
 				RunAsUser: &userID,
+				SELinuxOptions: &corev1.SELinuxOptions{
+					Type: "spc_t",
+				},
 			},
 		},
 	}