Merge pull request #3000 from weaveworks/issues/2990-empty-selinuxoptions-by-default

Kubernetes' seLinuxOptions are empty by default

prog/weave-kube/weave-daemonset-k8s-1.6.yaml

@@ -106,8 +106,7 @@ items:
           hostPID: true
           restartPolicy: Always
           securityContext:
-            seLinuxOptions:
-              type: spc_t
+            seLinuxOptions: {}
           serviceAccountName: weave-net
           tolerations:
             - effect: NoSchedule

prog/weave-kube/weave-daemonset.yaml

@@ -70,8 +70,7 @@ items:
           hostPID: true
           restartPolicy: Always
           securityContext:
-            seLinuxOptions:
-              type: spc_t
+            seLinuxOptions: {}
           serviceAccountName: weave-net
           volumes:
             - name: weavedb

site/kube-addon.md

@@ -223,6 +223,7 @@ If the YAML file is from `cloud.weave.works` as described above, then you can cu
   - `trusted-subnets`: comma-separated list of CIDRs. Default: empty.
   - `disable-npc`: boolean (`true|false`). Default: `false`.
   - `env.NAME=VALUE`: add environment variable `NAME` and set it to `VALUE`.
+  - `seLinuxOptions.NAME=VALUE`: add SELinux option `NAME` and set it to `VALUE`, e.g. `seLinuxOptions.type=spc_t`
 
 The list of variables you can set is: