How to enable SELinux configuration on the realtime pods in Kubernetes connector deployment?

How to enable SELinux configuration on the realtime pods in Kubernetes connector deployment?

37
Created On 09/02/26 05:15 AM - Last Modified 09/02/26 05:19 AM


Objective


How to enable SELinux configuration on the realtime pod in Kubernetes connector deployment?



Environment


**Product_versions**
• Product: Cortex XDR Agent
• OS Type: Redhat enterprise 10.2

**Topology/Configuration**
Kubernetes cluster version 1.34.10+rke2r1, containerd 2.2.6-k3s1, SELinux enabled in enforcing mode.



Procedure


When we have SELinux enabled in enforcing mode on the nodes, we would need to enable SELinux configuration on the realtime pods.

In order to set the SELinux configuration on the realtime pod, using the Kubernetes installer, We would need to add `konnector-template.realtimeProtectionValues.selinuxOptionsSpcT: true` in the `values.yaml`.

For Example: 
In values.yaml file add this line: selinuxOptionsSpcT: true under realtimeProtectionValues under konnector-template.

global:
  distribution:
  ...
konnector-template:
  enabled: true
  ...
  realtimeProtectionValues:     
    selinuxOptionsSpcT: true
    ...

After changing this, Please rerun the `helm upgrade ...` command for this change to reflect and redeploy pods with this settings.

 



Additional Information


N/A

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000kCPyKAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail