Move selinux fix to haproxy_post_install.yml
haproxy_service_config.yml is not a valid place for selinux fix. It should be moved to haproxy_post_install.yml. Change-Id: Ice55e1cd9fdbac6e564c7f084dc1a020940a0da8
This commit is contained in:
@@ -77,3 +77,15 @@
|
|||||||
opts: bind
|
opts: bind
|
||||||
state: mounted
|
state: mounted
|
||||||
fstype: none
|
fstype: none
|
||||||
|
|
||||||
|
- name: Prevent SELinux from preventing haproxy from binding to arbitrary ports
|
||||||
|
seboolean:
|
||||||
|
name: haproxy_connect_any
|
||||||
|
state: yes
|
||||||
|
persistent: yes
|
||||||
|
tags:
|
||||||
|
- haproxy-service-config
|
||||||
|
notify:
|
||||||
|
- Reload haproxy
|
||||||
|
when:
|
||||||
|
- ansible_facts['selinux']['status'] == "enabled"
|
||||||
|
|||||||
@@ -41,15 +41,3 @@
|
|||||||
(item.service.state is defined and item.service.state == 'absent')
|
(item.service.state is defined and item.service.state == 'absent')
|
||||||
tags:
|
tags:
|
||||||
- haproxy-service-config
|
- haproxy-service-config
|
||||||
|
|
||||||
- name: Prevent SELinux from preventing haproxy from binding to arbitrary ports
|
|
||||||
seboolean:
|
|
||||||
name: haproxy_connect_any
|
|
||||||
state: yes
|
|
||||||
persistent: yes
|
|
||||||
tags:
|
|
||||||
- haproxy-service-config
|
|
||||||
notify:
|
|
||||||
- Reload haproxy
|
|
||||||
when:
|
|
||||||
- ansible_facts['selinux']['status'] == "enabled"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user