SELinux Policy for OpenShift Containers

I was exploring Cilium on OpenShift, this paper is a summary of what is required for a container to run properly in OpenShift where SELinux is turned on by default.

The Problem

After installing the Cilium, the hubble-relay is not able to connect to the hubble through the Unix socket and therefore the hubble UI is not able to show the connection topologies. The…