Promtail needs selinux option type spc_t

General MR

Summary

promtail needs selinux permissions

discovered when deploying to dogfood cluster rhel worker nodes.

chart/templates/gatekeeper/values.yaml

@@ -101,7+101,7 @@
       {{- end }}
   {{- end }}
 
   {{- if or .Values.fluentbit.enabled .Values.twistlock.enabled }}
   selinuxPolicy:
     parameters:
       excludedResources:
@@ -113,7+113,7 @@
       # Twistlock Defenders need selinux option type spc_t
       - twistlock/twistlock-defender
       {{- end }}
+      {{- if .Values.promtail.enabled }}
+      # Promtail needs selinux option type spc_t
+      - logging/promtail
+      {{- end }}
   {{- end }}
 
   {{- if or .Values.fluentbit.enabled .Values.twistlock.enabled .Values.monitoring.enabled .Values.promtail.enabled }}