SELinux policy interfering with kaniko

[bcressey]

What I expected to happen:
Kaniko should be able to run.

What actually happened:
Kaniko fails with a "permission denied" error.

How to reproduce the problem:

$ kubectl run -it --image gcr.io/kaniko-project/executor:debug-v0.19.0 test --restart Never --rm --command /busybox/sh
standard_init_linux.go:211: exec user process caused "permission denied"
pod "test" deleted
pod default/test terminated (Error)

A denial is logged for the entrypoint action.

[ 2665.498681] audit: type=1400 audit(1594349602.727:3): avc:  denied  { entrypoint } for  pid=54919 comm="runc:[2:INIT]" path="/busybox/busybox" dev="nvme1n1p1" ino=1062349 scontext=system_u:system_r:container_t:s0 tcontext=system_u:object_r:cache_t:s0 tclass=file permissive=0