Merge pull request #834 from jsafrane/add-selinux-controller

STOR-2267: Run SELinux warning controller

Author: openshift-merge-bot[bot]

bindata/assets/config/defaultconfig.yaml

@@ -26,6 +26,9 @@ extendedArguments:
   - "-ttl" # TODO: this is excluded in kube-core, but not in #21092
   - "-bootstrapsigner"
   - "-tokencleaner"
+  # Most upstream clusters don't care about SELinux, therefore this controller is opt-in. OCP cares.
+  # Owner: OCP storage team, @jsafrane.
+  - "selinux-warning-controller"
   cloud-provider:
     - "external"
   cluster-signing-duration:

pkg/cmd/render/render_test.go

@@ -189,6 +189,7 @@ func TestRenderCommand(t *testing.T) {
 						"--controllers=-bootstrapsigner",
 						"--controllers=-tokencleaner",
 						"--controllers=-ttl",
+						"--controllers=selinux-warning-controller",
 						"--enable-dynamic-provisioning=true",
 						"--feature-gates=Bar=false",
 						"--feature-gates=Foo=true",
@@ -268,6 +269,7 @@ func TestRenderCommand(t *testing.T) {
 						"--controllers=-bootstrapsigner",
 						"--controllers=-tokencleaner",
 						"--controllers=-ttl",
+						"--controllers=selinux-warning-controller",
 						"--enable-dynamic-provisioning=true",
 						"--feature-gates=Bar=false",
 						"--feature-gates=Foo=true",
@@ -333,6 +335,7 @@ func TestRenderCommand(t *testing.T) {
 						"--controllers=-bootstrapsigner",
 						"--controllers=-tokencleaner",
 						"--controllers=-ttl",
+						"--controllers=selinux-warning-controller",
 						"--enable-dynamic-provisioning=true",
 						"--feature-gates=AwesomeNewFeature=true",
 						"--feature-gates=BadFailingFeature=false",