k3s-selinux is a SELinux policy package for k3s.
The project addresses the need to enforce SELinux security policies on systems running k3s, the lightweight Kubernetes distribution. It provides a compiled SELinux policy module that allows k3s to operate correctly within SELinux-enforcing environments, where the default system policies would otherwise block k3s operations. The approach packages this policy as an RPM that can be installed on Red Hat-based systems.
Operators running k3s on SELinux-enabled systems should adopt this tool to avoid having to disable SELinux entirely or run k3s in permissive mode. It is essential for production deployments on enterprise Linux distributions where SELinux enforcement is a security requirement. The project is distributed through Rancher's RPM repositories in testing, latest, and stable channels, allowing users to choose their preferred release stability level.
The project maintains a structured versioning scheme tied directly to RPM packaging conventions, with tags encoding both the policy version and the RPM channel and release number. Development activity shows ongoing maintenance of the SELinux policy definitions and RPM build infrastructure to keep the package compatible with k3s releases and various Enterprise Linux versions.
