only reads seLinuxOptions at the pod level

[kubewarden]

only reads seLinuxOptions at the pod level

[ereslibre]

Can you specify what is the expectation? This policy will default seLinuxOptions to the specified settings if the pod has not provided any.

Besides defaulting only seLinuxOptions on the pod level, it also checks that all containers meet the seLinuxOptions of the pod -- regardless if it was defaulted or not.

[ereslibre]

NVM, the next version will behave exactly as https://github.com/kubernetes/kubernetes/blob/57a977996e42fd7e06db39ef22d565c1d3e8c12a/staging/src/k8s.io/pod-security-admission/policy/check_seLinuxOptions.go

Also, the relevant parts at https://github.com/kubernetes/kubernetes/blob/57a977996e42fd7e06db39ef22d565c1d3e8c12a/pkg/security/podsecuritypolicy/provider.go#L68, and https://github.com/kubernetes/kubernetes/blob/57a977996e42fd7e06db39ef22d565c1d3e8c12a/pkg/security/podsecuritypolicy/provider.go#L129

[ereslibre]

selinux-psp-policy 0.1.4 is released. This should be fixed now. Please reopen if it's not the case. Thanks!