Say that K3s will fail to start if both new and deprecated SELinux flags are used

Co-authored-by: Jacob Blain Christen <dweomer5@gmail.com>
This commit is contained in:
Catherine Luse
2020-09-16 13:02:57 -07:00
co-authored by Jacob Blain Christen
parent 2f04ae5f4d
commit 350a30e6fc
+1 -1
View File
@@ -314,7 +314,7 @@ rpm -i https://rpm.rancher.io/k3s-selinux-0.1.1-rc1.el7.noarch.rpm
To force the install script to log a warning rather than fail, you can set the following environment variable: `INSTALL_K3S_SELINUX_WARN=true`.
The way that SELinux enforcement is enabled or disabled depends on the K3s version.
The way that SELinux enforcement is enabled or disabled depends on the K3s version. Prior to v1.19.x, SELinux enablement for the builtin containerd was automatic but could be disabled by passing `--disable-selinux`. With v1.19.x and beyond enabling SELinux must be affirmatively configured via the `--selinux` flag or config file entry. Servers and agents that specify both the `--selinux` and (deprecated) `--disable-selinux` flags will fail to start.
{{% tabs %}}
{{% tab "K3s v1.19.1+k3s1" %}}