Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The Operator creates SeccompProfile even though in the ProfileRecording kind=SelinuxProfile #2463

Open
nev888 opened this issue Sep 25, 2024 · 3 comments
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@nev888
Copy link

nev888 commented Sep 25, 2024

spod-zjn2z_security-profiles-operator.log
security-profiles-operator-webhook.log
security-profiles-operator.log

What happened:

I'm trying to create SelinuxProfile using ProfileRecordings however SeccompProfile is created instead.

What you expected to happen:

I expected SelinuxProfile to be created.

How to reproduce it (as minimally and precisely as possible):

installation followed: https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/installation-usage.md

profile recording followed:
https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/installation-usage.md#record-profiles-from-workloads-with-profilerecordings

restricted it to single namespace:
https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/installation-usage.md#restricting-to-a-single-namespace-with-upstream-deployment-manifests

Environment:

Openshift environment

  • Cloud provider or hardware configuration:
    NAME="Red Hat Enterprise Linux CoreOS"
    VERSION_ID="4.15"
    PRETTY_NAME="Red Hat Enterprise Linux CoreOS 415.92.202403270524-0 (Plow)"
    REDHAT_BUGZILLA_PRODUCT="OpenShift Container Platform"
    OPENSHIFT_VERSION="4.15"
    RHEL_VERSION="9.2"
@nev888 nev888 added the kind/bug Categorizes issue or PR as related to a bug. label Sep 25, 2024
@nev888
Copy link
Author

nev888 commented Sep 25, 2024

@ccojocar
Copy link
Contributor

Did you change the kind in ProfileRecoding to SelinuxProfile ? It supports only the log recorder for Selinux. Could you share the ProfileRecording CR that you are creating?

Also there are some more guidelines in https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/installation-usage.md#create-a-selinux-profile.

@nev888
Copy link
Author

nev888 commented Sep 28, 2024

Yes, the kind is set to SelinuxProfile and the recording is log. The profile is also attached profilerecoding.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

No branches or pull requests

2 participants