policy for cri-o
All of the rules required to administrate a CRI-O environment.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
| role |
Role allowed access. |
Execute CRI-O in the crio domain.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed to transition. |
Read the process state (/proc/pid) of CRI-O conmon.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Execute CRI-O in the crio domain, and allow the specified role the kubelet domain.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed to transition. |
| role |
The role to be allowed the crio domain. |