This bug was initially created as a copy of Bug #1980693 I am copying this bug because OKD machine-os builds can no longer pull updates, as they require updated glibc, which requires selinux-policy update. Description of problem: After OKD has updated Fedora to `selinux-policy-34.9-1.fc34` two Kubernetes tests started failing: [sig-storage] In-tree Volumes [Driver: hostPath] [Testpattern: Inline-volume (default fs)] volumes should store data [Suite:openshift/conformance/parallel] [Suite:k8s] [sig-storage] In-tree Volumes [Driver: hostPathSymlink] [Testpattern: Inline-volume (default fs)] volumes should store data [Suite:openshift/conformance/parallel] [Suite:k8s] machine-os can't bump glib or selinux-policy, as kubernetes test is creating a file using privileged container but reads it using unprivileged one. This is no longer valid in updated selinux-policy package. https://github.com/kubernetes/kubernetes/pull/104551 fixes this behaviour.
Clearing blocker flag, we don't want to block OCP with it. Keeping urgent to fix OKD.
For the record, here is an attempted fix: https://github.com/kubernetes/kubernetes/pull/104551
Upstream issue: https://github.com/kubernetes/kubernetes/issues/84585
Upstream fix merged in master (1.23) - https://github.com/kubernetes/kubernetes/pull/104551
Since 1.23 rebase has landed (with the fix from comment 4), re-assigning to @Vadim for verification.
Resolved and verified in OKD 4.10 nightly
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:0056