Promtail needs selinux option type spc_t

General MR

Summary

promtail needs selinux permissions

discovered when deploying to dogfood cluster rhel worker nodes.

chart/templates/gatekeeper/values.yaml

@@ -101,7 +101,7 @@ violations:  # Try to keep this in alpha order to make it easier to find keys
       {{- end }}
   {{- end }}
 
-  {{- if or .Values.fluentbit.enabled .Values.twistlock.enabled }}
+  {{- if or .Values.fluentbit.enabled .Values.twistlock.enabled .Values.promtail.enabled }}
   selinuxPolicy:
     parameters:
       excludedResources:
@@ -113,6 +113,10 @@ violations:  # Try to keep this in alpha order to make it easier to find keys
       # Twistlock Defenders need selinux option type spc_t
       - twistlock/twistlock-defender
       {{- end }}
+      {{- if .Values.promtail.enabled }}
+      # Promtail needs selinux option type spc_t
+      - logging/promtail
+      {{- end }}
   {{- end }}
 
   {{- if or .Values.fluentbit.enabled .Values.twistlock.enabled .Values.monitoring.enabled .Values.promtail.enabled }}