Cosmin Cojocar
Cosmin Cojocar
@Rash419 Please could you fix the build failure? Thanks
Did you change the `kind` in `ProfileRecoding` to `SelinuxProfile` ? It supports only the `log` recorder for Selinux. Could you share the `ProfileRecording` CR that you are creating? Also there...
Thanks for investigating it. It looks like a bug.
Is the Selinux enabled in the `spod` configuration? ``` kubectl get -o yaml spod spod ``` Does it show the `enableSelinux: true`?
Can you also get the annotations and the labels from your pod after it is being created? I want to check if the webhook applies the correct annoations for profile...
The annotations looks correct, `trace-avcs` means selinux. Can you also check the spod daemonset logs? Check on which cluster node your pod being recorded in scheduled, and also get the...
It seems that you have already some selinuxprofiles in the cluster? ``` kubectl get selinuxprofiles --all-namesapces kubectl get profilerecording -o json --all-namesapce | jq .items[].spec.kind ```
Unfortunately, I don't have a cluster with SELinux enabled to debug it. Is the `selinuxd` container running on the spod pod where your pod is being recorded? If so, what...
So, you don't see anything in the audit log with `type=AVC`?
I am trying to spin up a local cluster running Fedora but I hit the same issue described in #2445. Maybe somebody from RedHat can help cc @saschagrunert .