Ooops - that should read
"Currently it does not work with SELinux: it installs a host mount from
/var/lib/romana inside the pod without a transition."
romana devs ask: "adding those three lines (to) romana-services and romana-agent
would fix it, but is it better to be more specific?
(spc = super-privileged container. happy to go with spc_t if there's no other
suggestion)"
The "three lines" refers to what kubeadm's etcd pod uses, viz.,
securityContext:
seLinuxOptions:
type: spc_t
Any advice is greatly appreciated.
Anthony