Skip to content

Commit dc1a925

Browse files
committed
Warn against using --disable-selinux in K3s v1.19.1+k3s1
1 parent 350a30e commit dc1a925

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

content/k3s/latest/en/advanced/_index.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -314,7 +314,7 @@ rpm -i https://rpm.rancher.io/k3s-selinux-0.1.1-rc1.el7.noarch.rpm
314314

315315
To force the install script to log a warning rather than fail, you can set the following environment variable: `INSTALL_K3S_SELINUX_WARN=true`.
316316

317-
The way that SELinux enforcement is enabled or disabled depends on the K3s version. Prior to v1.19.x, SELinux enablement for the builtin containerd was automatic but could be disabled by passing `--disable-selinux`. With v1.19.x and beyond enabling SELinux must be affirmatively configured via the `--selinux` flag or config file entry. Servers and agents that specify both the `--selinux` and (deprecated) `--disable-selinux` flags will fail to start.
317+
The way that SELinux enforcement is enabled or disabled depends on the K3s version. Prior to v1.19.x, SELinux enablement for the builtin containerd was automatic but could be disabled by passing `--disable-selinux`. With v1.19.x and beyond, enabling SELinux must be affirmatively configured via the `--selinux` flag or config file entry. Servers and agents that specify both the `--selinux` and (deprecated) `--disable-selinux` flags will fail to start.
318318

319319
{{% tabs %}}
320320
{{% tab "K3s v1.19.1+k3s1" %}}
@@ -326,6 +326,9 @@ This option can also be specified in the K3s [configuration file:]({{<baseurl>}}
326326
```
327327
selinux: true
328328
```
329+
330+
The `--disable-selinux` option should not be used. It is deprecated and will be either ignored or will be unrecognized, resulting in an error, in future minor releases.
331+
329332
{{%/tab%}}
330333
{{% tab "K3s prior to v1.19.1+k3s1" %}}
331334

0 commit comments

Comments
 (0)