Skip to content

Commit

Permalink
Adding SELinux Documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
cniackz committed Jul 26, 2024
1 parent 7d99392 commit 62e070b
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions docs/openshift.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,3 +7,18 @@ DirectPV runs under project `directpv` in Red Hat OpenShift. Project `directpv`
## Limitations
* DirectPV does not support volume snapshot feature as per CSI specification. DirectPV is specifically meant for use cases like MinIO where the data availability and resiliency is taken care by the application itself. Additionally, with the AWS S3 versioning APIs and internal healing, snapshots is not a requirement.
* DirectPV does not support `ReadWriteMany` volume access mode. The workloads using DirectPV run local to the node and are provisioned from local storage drives in the node. This allows the workloads to directly access data without any additional network hops, unlike remote volumes, network PVs, etc. The additional network hops may lead to poor performance and increases the complexity. With `ReadWriteOnce` access mode, DirectPV provides high performance storage for Pods.

## SELinux in OpenShift:

If you encounter the `relabel failed` error after executing the `suspend` or `resume` commands, you should set `spc_t` at the Tenant level Specification, as demonstrated below:

```yaml
kind: Tenant
spec:
pools:
- containerSecurityContext:
seLinuxOptions:
type: spc_t
```
Ensure that the appropriate Security Context Constraints (SCCs) are in place, as illustrated in the following link: https://access.redhat.com/solutions/7025337.

0 comments on commit 62e070b

Please sign in to comment.