Commit 6bbb9019 authored by Guillaume Abrioux's avatar Guillaume Abrioux
Browse files

rgw-loadbalancers: add all rgw_ports to http_port_t type

This adds all rgw ports to the http_port_t selinux type so it
allows haproxy to connect to those ports in order to avoid AVC.


Signed-off-by: default avatarGuillaume Abrioux <>
parent 9e7f22a0
......@@ -33,3 +33,18 @@
mode: "0644"
- restart keepalived
- name: selinux related tasks
when: ansible_facts['os_family'] == 'RedHat'
- name: set_fact rgw_ports
rgw_ports: "{{ rgw_ports | default([]) + [hostvars[item]['rgw_instances']['radosgw_frontend_port']] | unique }}"
with_items: "{{ groups.get(rgw_group_name, []) }}"
- name: add selinux rules
ports: "{{ rgw_ports }}"
proto: tcp
setype: http_port_t
state: present
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment