Merge "Ensure os_keepalived_dac_override is enabled"

This commit is contained in:
Zuul
2023-12-21 17:56:02 +00:00
committed by Gerrit Code Review
2 changed files with 11 additions and 1 deletions

View File

@@ -4,7 +4,7 @@ class openstack_integration {
if $facts['os']['family'] == 'RedHat' {
package { 'openstack-selinux':
ensure => 'latest'
ensure => 'present'
}
}
}

View File

@@ -72,12 +72,22 @@ class openstack_integration::neutron (
selboolean { 'os_neutron_dac_override':
persistent => true,
value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
}
if $driver == 'openvswitch' or $driver == 'linuxbridge' {
selboolean { 'os_dnsmasq_dac_override':
persistent => true,
value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
}
selboolean { 'os_keepalived_dac_override':
persistent => true,
value => on,
require => Package['openstack-selinux'],
before => Anchor['neutron::service::begin'],
}
}
}