kubedns.te

module kubedns 1.0;

require {
        type container_var_run_t;
        type container_t;
        class file { open read ioctl };
}

#============= container_t ==============
allow container_t container_var_run_t:file read;
allow container_t container_var_run_t:file open;
allow container_t container_var_run_t:file ioctl;