Docs feedback: Helm/No Mention accommodation of Selinux?

We are installing gitlab using the helm chart in kubernetes. our nodes have selinux enforcing. Many of the pods error/crashloop backoff state. If we set selinux to permissive instead, then deploy the pods come up.

The request here is maybe there should be an selinux/kubernetes security context considerations section. Many of us have it as a requirement and we cannot disable it. I also don't see any options in the helm values to accommodate security contexts, selinux options, or privileged (some use privileged to at least get it to work in selinux w/o having to make a context).

thank you for your consideration.

Actionable work

  • For all Deployment / StatefulSet, enable templating of securityContext.seLinuxOptions if present.
Edited by Jason Plum