]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-ansible.git/commit
projects / ceph-ansible.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 266b6e7) | patch
Turn off SELinux separation for containers MON and RGW
authorTeoman ONAY <tonay@redhat.com>
Mon, 7 Mar 2022 09:31:14 +0000 (10:31 +0100)
committerGuillaume Abrioux <gabrioux@redhat.com>
Tue, 8 Mar 2022 13:45:45 +0000 (14:45 +0100)
commit7e8ce2567ec7f163c763547252a7a5bcc983fd98
tree6cb363fbd691ce23e78732def04370079ca19592tree | snapshot
parent266b6e739c26a931f1c975a990f22906223015efcommit | diff
Turn off SELinux separation for containers MON and RGW

Initially MONs and RGW binded /etc/pki/ca-trust/extracted using the :z flag
(introduced to solve an OSP TripleO issue on RHEL - #3638) but using
this flag prevents local services (like sssd) running on the host from accessing
the certificates/files in that folder.

Signed-off-by: Teoman ONAY <tonay@redhat.com>
roles/ceph-container-common/tasks/prerequisites.yml diff | blob | history
roles/ceph-mon/templates/ceph-mon.service.j2 diff | blob | history
roles/ceph-rgw/templates/ceph-radosgw.service.j2 diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.