Install with SELinux Enabled

some integrations may require additional selinux configuration to be done by the system administrator in order to work by default, the installer requires that selinux is disabled before continuing if you need to leave selinux enabled you can add a flag (under the selinuxconfig spec) to the installer override yaml patch file spec section for example apiversion cluster kurl sh/v1beta1 kind installer metadata name "patch" spec selinuxconfig selinux "enforcing" preserveconfig false disableselinux false after the tpi completes, you can verify selinux is still enabled by running this command; the current mode should be “enforcing ” sudo sestatus selinux status enabled selinuxfs mount /sys/fs/selinux selinux root directory /etc/selinux loaded policy name targeted current mode enforcing mode from config file enforcing policy mls status enabled policy deny unknown status allowed max kernel policy version 31 see overriding installer settings docid\ jhwb4tkprl ws43pk7g4w for instructions on how to specify the installer override file during the install and join node commands