New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Automated cherry pick of #87658: Enable selinux tags in make targets #87753
Automated cherry pick of #87658: Enable selinux tags in make targets #87753
Conversation
In 24d1059, a fix was made in bazel based builds to ensure that we add `selinux` tag when we build all binaries especially the `kubelet`. We need to do the same for in our hack scripts so things like `make release` will work properly as well. Some scripts use `GOFLAGS=-tags=providerless` for example, So we should support the tags to be specified in GOFLAGS as well. We parse out the tags from there and ensure selinux is added to the list of tags we used for building the binaries. Note that we add our own `-tags` with the full set of tags and since we specify our parameter at the end, ours full list takes precendence
/test pull-kubernetes-cross |
/kind bug |
/release-note-none |
/lgtm |
/hold the only e2e tests I'm aware of around selinux functionality are still failing - see #87658 do we have verification this actually resolves the problem? |
Today is the cherry pick deadline for the next patch release cycle. |
I would prefer to get that into the next release. @liggitt I am running a bazel built tag of v1.16.6 successfully for a while with SELinux working. I tested this PR through running |
Would like #88008 triaged before merging this |
#88008 turned out to be a non-issue. /hold cancel |
The PR is very needed for companies that use k8s with mandatory SELinux. We upgraded to 1.16 and now our k8s cluster won't work without disabling SELinux. IMHO it is a high priority one. |
As #88247 has been merged, I think this PR should be ready for approval. |
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: liggitt, simonswine The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Oops, wrong window (was: |
@kolyshkin: you can only set the release note label to release-note-none if you are the PR author or an org member. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Cherry pick of #87658 on release-1.17.
#87658: Enable selinux tags in make targets
For details on the cherry pick process, see the cherry pick requests page.