From: Zack Cerza <zack@redhat.com>
Date: Mon, 24 Jul 2017 23:07:58 +0000 (-0700)
Subject: Restore SELinux context of OSD journals
X-Git-Tag: v1.0~40^2~1
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=0c22164da00951844643b3dc539bdf739a04fd3b;p=cephmetrics.git

Restore SELinux context of OSD journals

So that our SELinux policy can properly allow collectors to detect
whether an OSD uses filestore or bluestore

Signed-off-by: Zack Cerza <zack@redhat.com>
---

diff --git a/ansible/roles/ceph-collectd/tasks/selinux.yml b/ansible/roles/ceph-collectd/tasks/selinux.yml
index d093769..80885e3 100644
--- a/ansible/roles/ceph-collectd/tasks/selinux.yml
+++ b/ansible/roles/ceph-collectd/tasks/selinux.yml
@@ -5,6 +5,12 @@
     state: yes
     persistent: yes
 
+- name: Restore SELinux context of OSD journals
+  shell: "restorecon -R -v /var/lib/ceph/osd/*/journal"
+  when: "'osds' in group_names"
+  register: restorecon
+  changed_when: restorecon.stdout|length != 0 or restorecon.stderr|length != 0
+
 - include: selinux_module.yml
   when:
     - devel_mode