From a704c30b3a07f0cae4b1aa30931e60e0632433f3 Mon Sep 17 00:00:00 2001
From: George Goh <george.goh@redhat.com>
Date: Wed, 29 Jun 2016 10:10:05 +0800
Subject: Enable additional 'virt_sandbox_use_nfs' seboolean as per
documentation:
https://docs.openshift.org/latest/install_config/persistent_storage/persistent_storage_nfs.html#nfs-selinux
---
roles/openshift_node/tasks/storage_plugins/nfs.yml | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/roles/openshift_node/tasks/storage_plugins/nfs.yml b/roles/openshift_node/tasks/storage_plugins/nfs.yml
index 14a613786..8380714d4 100644
--- a/roles/openshift_node/tasks/storage_plugins/nfs.yml
+++ b/roles/openshift_node/tasks/storage_plugins/nfs.yml
@@ -9,3 +9,10 @@
state: yes
persistent: yes
when: ansible_selinux and ansible_selinux.status == "enabled"
+
+- name: Set seboolean to allow nfs storage plugin access from containers(sandbox)
+ seboolean:
+ name: virt_sandbox_use_nfs
+ state: yes
+ persistent: yes
+ when: ansible_selinux and ansible_selinux.status == "enabled"
--
cgit v1.2.3