SELinux relabel failed after upgrade to RHOCP 4.7

Solution Verified - Updated -

Issue

  • After upgrading to RHOCP 4.7.x there are SELinux issues with pods using PVC on CephFS.

  • The kubelet reports "relabel failed" errors:

    Error: relabel failed /var/lib/kubelet/pods/84203812-35e1-4693-8c66-7513b97c4b56/volumes/kubernetes.io~csi/pvc-aee591ce-79f7-41f4-ba62-88b17f35446a/mount: failed to set file label on /var/lib/kubelet/pods/84203812-35e1-4693-8c66-7513b97c4b56/volumes/kubernetes.io~csi/pvc-aee591ce-79f7-41f4-ba62-88b17f35446a/mount: permission denied

Environment

  • Red Hat OpenShift Container Platform 4.7
  • Red Hat Ceph Storage 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content