UNCLASSIFIED - NO CUI

Skip to content

Missing restrict-selinux-type policy for alloy similar to promtail

Alloy isn't able to read any logs because the securityContext needs an selinuxOption of spc_t similar to promtail here: https://repo1.dso.mil/big-bang/product/packages/promtail/-/blob/main/chart/values.yaml?ref_type=heads#L196

Please apply the policy like promtail has it here: https://repo1.dso.mil/big-bang/bigbang/-/blob/2.52.0/chart/templates/kyverno-policies/values.yaml?ref_type=tags#L930

Thanks!