<p>I followed kubernetes documentation to manage secrets of my applications.</p>

<p><a href="http://kubernetes.io/v1.1/docs/user-guide/secrets.html" rel="nofollow">http://kubernetes.io/v1.1/docs/user-guide/secrets.html</a></p>

<p>When pod starts it kubernetes mounts secret at the right place, but application is unable to read secret data as it described in documentation.</p>

<pre><code>root@quoter-controller-whw7k:/etc/quoter# whoami
root
root@quoter-controller-whw7k:/etc/quoter# ls -l
ls: cannot access local.py: Permission denied
total 0
-????????? ? ? ? ?            ? local.py
root@quoter-controller-whw7k:/etc/quoter# cat local.py 
cat: local.py: Permission denied
</code></pre>

<p>What is wrong with that?</p>

<hr>

<p>SELinux configured with enforcing mode</p>

<p><code>SELINUX=enforcing</code></p>

<p>Docker started with the following command</p>

<pre><code>/usr/bin/docker daemon --registry-mirror=http://mirror.internal:5000 --selinux-enabled --insecure-registry registry.internal:5555 --storage-driver devicemapper --storage-opt dm.fs=xfs --storage-opt dm.thinpooldev=/dev/mapper/atomicos-docker--pool --bip=10.16.16.1/24 --mtu=8951
</code></pre>

<p>There is a known issue with SELinux and Kubernetes Secrets as per the Atomic issue tracker, see <a href="https://github.com/projectatomic/adb-atomic-developer-bundle/issues/117" rel="nofollow">ISSUE-117</a>.</p>
