소스 검색

Merge pull request #8684 from sdodson/bz1587825

Enable container_manage_crgroup sebool
OpenShift Merge Robot 6 년 전
부모
커밋
29ba5fc3bd
1개의 변경된 파일9개의 추가작업 그리고 0개의 파일을 삭제
  1. 9 0
      roles/openshift_node/tasks/main.yml

+ 9 - 0
roles/openshift_node/tasks/main.yml

@@ -52,6 +52,15 @@
     sysctl_file: "/etc/sysctl.d/99-openshift.conf"
     sysctl_file: "/etc/sysctl.d/99-openshift.conf"
     reload: yes
     reload: yes
 
 
+# Required in some selinux policy versions see
+# https://bugzilla.redhat.com/show_bug.cgi?id=1587825
+# https://bugzilla.redhat.com/show_bug.cgi?id=1549765
+- name: Setting sebool container_manage_cgroup
+  seboolean:
+    name: container_manage_cgroup
+    state: yes
+    persistent: yes
+
 - import_tasks: registry_auth.yml
 - import_tasks: registry_auth.yml
 
 
 - name: include standard node config
 - name: include standard node config