openstack/puppet-openstack-integration
Code Issues Proposed changes

Ensure os_keepalived_dac_override is enabled

Browse Source 
According to [1], the dac override options may be disabled in a future
release.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=2000945

Change-Id: I3779072f9213fee03f350cc9a8786072c318037d
This commit is contained in:
Takashi Kajinami 2023-12-21 19:34:49 +09:00
parent 448fa3e8b9
commit df3d689042
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
manifests/init.pp
View File

@ -4,7 +4,7 @@ class openstack_integration {
if $facts['os']['family'] == 'RedHat' { if $facts['os']['family'] == 'RedHat' {
package { 'openstack-selinux': package { 'openstack-selinux':
ensure => 'latest' ensure => 'present'
} }
} }
} }

10
manifests/neutron.pp
View File

@ -72,12 +72,22 @@ class openstack_integration::neutron (
selboolean { 'os_neutron_dac_override': selboolean { 'os_neutron_dac_override':
persistent => true, persistent => true,
value => on, value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
} }
if $driver == 'openvswitch' or $driver == 'linuxbridge' { if $driver == 'openvswitch' or $driver == 'linuxbridge' {
selboolean { 'os_dnsmasq_dac_override': selboolean { 'os_dnsmasq_dac_override':
persistent => true, persistent => true,
value => on, value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
}
selboolean { 'os_keepalived_dac_override':
persistent => true,
value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
} }
} }
} }