From 69bdd29509c44d45190c1ce367815d7d2ad29f5e Mon Sep 17 00:00:00 2001 From: "sebastien.heurtematte" Date: Wed, 16 Oct 2024 17:16:05 +0200 Subject: [PATCH] feat: Migrate to CephFS - technology.subversive Signed-off-by: sebastien.heurtematte --- instances/technology.subversive/config.jsonnet | 1 + instances/technology.subversive/target/config.json | 1 + .../technology.subversive/target/k8s/statefulset.json | 7 ++++++- 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/instances/technology.subversive/config.jsonnet b/instances/technology.subversive/config.jsonnet index 724a28e64..2d0850c2d 100644 --- a/instances/technology.subversive/config.jsonnet +++ b/instances/technology.subversive/config.jsonnet @@ -8,4 +8,5 @@ "subversion", ], }, + seLinuxLevel: "s0:c55,c0", } diff --git a/instances/technology.subversive/target/config.json b/instances/technology.subversive/target/config.json index 8bd021356..fd16f21ed 100644 --- a/instances/technology.subversive/target/config.json +++ b/instances/technology.subversive/target/config.json @@ -898,6 +898,7 @@ }, "generate": false }, + "seLinuxLevel": "s0:c55,c0", "secrets": { "dockerconfigjson": { "dockerconfigjson-for-pull-as-default": { diff --git a/instances/technology.subversive/target/k8s/statefulset.json b/instances/technology.subversive/target/k8s/statefulset.json index 26cc20528..2c5c03748 100644 --- a/instances/technology.subversive/target/k8s/statefulset.json +++ b/instances/technology.subversive/target/k8s/statefulset.json @@ -119,7 +119,12 @@ "cpu": "250m" } }, - "securityContext": { }, + "securityContext": { + "seLinuxOptions": { + "level": "s0:c55,c0", + "type": "spc_t" + } + }, "volumeMounts": [ { "mountPath": "/var/jenkins",