Restore SELinux context of OSD journals

So that our SELinux policy can properly allow collectors to detect
whether an OSD uses filestore or bluestore

Signed-off-by: Zack Cerza <zack@redhat.com>

diff --git a/ansible/roles/ceph-collectd/tasks/selinux.yml b/ansible/roles/ceph-collectd/tasks/selinux.yml
index d0937691c029bbeb303660f8f483ab1e5e87e94f..80885e3aa3610696638fa32c1f6dc8e4d06412b8 100644 (file)
--- a/ansible/roles/ceph-collectd/tasks/selinux.yml
+++ b/ansible/roles/ceph-collectd/tasks/selinux.yml
@@ -5,6 +5,12 @@
     state: yes
     persistent: yes
 
+- name: Restore SELinux context of OSD journals
+  shell: "restorecon -R -v /var/lib/ceph/osd/*/journal"
+  when: "'osds' in group_names"
+  register: restorecon
+  changed_when: restorecon.stdout|length != 0 or restorecon.stderr|length != 0
+
 - include: selinux_module.yml
   when:
     - devel_mode