SELinux Volume Label Changes goes GA (and likely implications in v1.37)

Kubernetes is implementing SELinuxMount to improve volume setup performance with SELinux enabled.

• •Changes from recursive relabeling to direct mount-time label application (constant time)
• •Breaking change: Pods with different SELinux labels cannot share the same volume
• •New seLinuxChangePolicy field allows opting out by setting to 'Recursive'
• •selinux-warning-controller detects and reports conflicting Pod configurations
• •Kubernetes v1.36 provides tools to audit and prepare for v1.37 adoption

This summary was automatically generated by AI based on the original article and may not be fully accurate.