Commit f47da73a authored by Guillaume Abrioux's avatar Guillaume Abrioux
Browse files

common: selinux tasks related refactor



This moves some task from the `ceph-nfs` role in `ceph-common` since
some of them are needed in `ceph-rgwloadbalancer` role.
This avoids duplicated tasks.
Signed-off-by: default avatarGuillaume Abrioux <gabrioux@redhat.com>
(cherry picked from commit d0442d81)
parent 3bfa0772
......@@ -57,3 +57,10 @@
- (ceph_tcmalloc_max_total_thread_cache | int) > 0
- osd_objectstore == 'filestore'
- (ceph_origin == 'repository' or ceph_origin == 'distro')
- name: include selinux.yml
include_tasks: selinux.yml
when:
- ansible_facts['os_family'] == 'RedHat'
- inventory_hostname in groups.get(nfs_group_name, [])
or inventory_hostname in groups.get(rgwloadbalancer_group_name, [])
\ No newline at end of file
---
- name: check if selinux is enabled
command: getenforce
register: selinuxstatus
changed_when: false
failed_when: false
check_mode: no
- name: if selinux is not disable
when: selinuxstatus.stdout != 'Disabled'
- name: if selinux is not disabled
when: ansible_facts['selinux']['status'] == 'enabled'
block:
- name: install policycoreutils-python
package:
......@@ -17,16 +10,13 @@
until: result is succeeded
when: ansible_facts['distribution_major_version'] == '7'
- name: install nfs-ganesha-selinux and python3-policycoreutils on RHEL 8
- name: install python3-policycoreutils on RHEL 8
package:
name: ['nfs-ganesha-selinux', 'python3-policycoreutils']
name: python3-policycoreutils
state: present
register: result
until: result is succeeded
when: ansible_facts['distribution_major_version'] == '8'
- name: add ganesha_t to permissive domain
selinux_permissive:
name: ganesha_t
permissive: true
failed_when: false
when:
- inventory_hostname in groups.get(nfs_group_name, [])
or inventory_hostname in groups.get(rgwloadbalancer_group_name, [])
- ansible_facts['distribution_major_version'] == '8'
......@@ -19,12 +19,28 @@
import_tasks: create_rgw_nfs_user.yml
when: groups.get(mon_group_name, []) | length > 0
- name: install nfs-ganesha-selinux on RHEL 8
package:
name: nfs-ganesha-selinux
state: present
register: result
until: result is succeeded
when:
- not containerized_deployment | bool
- inventory_hostname in groups.get(nfs_group_name, [])
- ansible_facts['os_family'] == 'RedHat'
- ansible_facts['distribution_major_version'] == '8'
# NOTE (leseb): workaround for issues with ganesha and librgw
- name: include ganesha_selinux_fix.yml
import_tasks: ganesha_selinux_fix.yml
- name: add ganesha_t to permissive domain
selinux_permissive:
name: ganesha_t
permissive: true
failed_when: false
when:
- not containerized_deployment | bool
- ansible_facts['os_family'] == 'RedHat'
- ansible_facts['selinux']['status'] == 'enabled'
- name: nfs with external ceph cluster task related
when:
......
......@@ -35,7 +35,9 @@
- restart keepalived
- name: selinux related tasks
when: ansible_facts['os_family'] == 'RedHat'
when:
- ansible_facts['os_family'] == 'RedHat'
- ansible_facts['selinux']['status'] == 'enabled'
block:
- name: set_fact rgw_ports
set_fact:
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment