csi-driver icon indicating copy to clipboard operation
csi-driver copied to clipboard

Support mounting with SELinux mount options to prevent big volumes from not being able to mount into pods

Open sharkymcdongles opened this issue 1 year ago • 1 comments

TL;DR

If you have a large PVC in k8s/k3s with selinux enabled, the volume won't mount to the pod because on boot containerd tries to assign selinux labels to all files leading to the pod never starting.

Expected behavior

Allow selinux context mounting and change the csidriver spec to announce it as described here:

https://kubernetes.io/blog/2023/04/18/kubernetes-1-27-efficient-selinux-relabeling-beta/

sharkymcdongles avatar Mar 21 '24 10:03 sharkymcdongles