This message was deleted.

from my experience (all on-prim) when I create a downstream cluster the process installs required package, so I have never manually installed either of those

rke2-selinux is required for rke2. rancher-selinux is required if you want to use rancher logging chart to collect logs from cluster nodes.

Thanks for the clarification, Brad! 👍 One thing that confuses me here is that the Rancher docs says about `rke2-selinux`: "It is installed automatically when the RKE2 installer script detects that it is running on an RPM-based distro." but it seems like that's not true for downstream RKE2 clusters installed by Rancher. Am I missing something here? 😕

thats only true for standalone clusters. if you provision via rancher, it always uses tarball install and does not install any RPMs.