Project Description

Currently we have selinux policies for rke2 and rancher that are deployed using rpms. Unfortunately these policies only support the rpm installation of rke2 and not the tarball version that is used for airgapped or by Rancher when it installs downstream clusters.

Goal for this Hackweek

The goal would be to create selinux policies that are compatible with the other kind of installation for rke2. I would first try to do those policies for RHEL based distros and if time SLE Micro.

Resources

https://github.com/rancher/rke2-selinux https://github.com/rancher/rancher-selinux

https://github.com/rancher/rke2/issues/3888 https://github.com/rancher/rke2/issues/3386 https://github.com/rancher/elemental/issues/1362