Red Hat build of MicroShift

Checking the pods for mismatch

To ensure workload consistency, check the pods running on MicroShift for mismatches. Identifying these discrepancies helps verify that your running workloads match the expected configuration.

Procedure

List the mount point within the first pod by running the following command:

$ oc get pods -n <pod_name_a> -ojsonpath='{.spec.containers[].volumeMounts[].mountPath}'

Replace <pod_name_a> with the name of the first pod.
Example output
```
/files /var/run/secrets/kubernetes.io/serviceaccount
```

List the mount point within the second pod by running the following command:

$ oc get pods -n <pod_name_b> -ojsonpath='{.spec.containers[].volumeMounts[].mountPath}'

Replace <pod_name_b> with the name of the second pod.
Example output
```
/files /var/run/secrets/kubernetes.io/serviceaccount
```

Check the context and permissions inside the first pod by running the following command:

$ oc rsh <pod_name_a> ls -lZah <pvc_mountpoint>

Replace <pod_name_a> with the name of the first pod.

Replace <pvc_mountpoint> with the mount point within the first pod.

Example output

total 12K
dr-xr-xr-x.   1 root root system_u:object_r:container_file_t:s0:c398,c806   40 Feb 17 13:36 .
dr-xr-xr-x.   1 root root system_u:object_r:container_file_t:s0:c398,c806   40 Feb 17 13:36 ..
[...]

Check the context and permissions inside the second pod by running the following command:

$ oc rsh <pod_name_b> ls -lZah <pvc_mountpoint>

Replace <pod_name_b> with the name of the second pod.

Replace <pvc_mountpoint> with the mount point within the second pod.

Example output

total 12K
dr-xr-xr-x.   1 root root system_u:object_r:container_file_t:s0:c15,c25   40 Feb 17 13:34 .
dr-xr-xr-x.   1 root root system_u:object_r:container_file_t:s0:c15,c25   40 Feb 17 13:34 ..
[...]

Compare both the outputs to check if there is a mismatch of SELinux context.