Ensure logs folder is created in prep hosts tasks.

We have non fatal errors in the upgrade
jobs execution if the logs folder is not
created when adding the readme.txt file
to clarify the possible locations of
the logs.

Closes-Bug: 1811708
Change-Id: Ibc0a266bdc6630eaf34bfadeff21f7bd72fa75ad
(cherry picked from commit 1e318b569e)

docker/services/aodh-api.yaml

@@ -155,13 +155,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/aodh
+          - { 'path': /var/log/containers/aodh, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/aodh-api
+          - { 'path': /var/log/containers/httpd/aodh-api, setype: svirt_sandbox_file_t }
+          - { 'path': /var/log/aodh, setype: svirt_sandbox_file_t }
       - name: aodh logs readme
         copy:
           dest: /var/log/aodh/readme.txt

docker/services/aodh-evaluator.yaml

@@ -111,10 +111,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/aodh
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/aodh, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/aodh, 'setype': svirt_sandbox_file_t }
         - name: aodh logs readme
           copy:
             dest: /var/log/aodh/readme.txt

docker/services/aodh-listener.yaml

@@ -118,10 +118,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/aodh
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/aodh, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/aodh, 'setype': svirt_sandbox_file_t }
         - name: aodh logs readme
           copy:
             dest: /var/log/aodh/readme.txt

docker/services/aodh-notifier.yaml

@@ -118,10 +118,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/aodh
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/aodh, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/aodh, 'setype': svirt_sandbox_file_t }
         - name: aodh logs readme
           copy:
             dest: /var/log/aodh/readme.txt

docker/services/ceilometer-agent-central.yaml

@@ -139,10 +139,14 @@ outputs:
               - 'ceilometer_agent_central'
               - "su ceilometer -s /bin/bash -c 'for n in {1..10}; do /usr/bin/ceilometer-upgrade && exit 0 || sleep 30; done; exit 1'"
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/ceilometer
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/ceilometer, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/ceilometer, 'setype': svirt_sandbox_file_t }
         - name: ceilometer logs readme
           copy:
             dest: /var/log/ceilometer/readme.txt

docker/services/ceilometer-agent-compute.yaml

@@ -107,10 +107,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/ceilometer
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/ceilometer, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ceilometer, 'setype': svirt_sandbox_file_t }
         - name: ceilometer logs readme
           copy:
             dest: /var/log/ceilometer/readme.txt

docker/services/ceilometer-agent-ipmi.yaml

@@ -118,10 +118,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/ceilometer
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/ceilometer, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ceilometer, 'setype': svirt_sandbox_file_t }
         - name: ceilometer logs readme
           copy:
             dest: /var/log/ceilometer/readme.txt

docker/services/ceilometer-agent-notification.yaml

@@ -135,10 +135,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/ceilometer
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/ceilometer, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ceilometer, 'setype': svirt_sandbox_file_t }
         - name: ceilometer logs readme
           copy:
             dest: /var/log/ceilometer/readme.txt

docker/services/cinder-api.yaml

@@ -211,13 +211,15 @@ outputs:
       metadata_settings:
         get_attr: [CinderBase, role_data, metadata_settings]
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/cinder
+            - { 'path': /var/log/containers/cinder, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/cinder-api
+            - { 'path': /var/log/containers/httpd/cinder-api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/cinder, 'setype': svirt_sandbox_file_t }
         - name: cinder logs readme
           copy:
             dest: /var/log/cinder/readme.txt

docker/services/cinder-backup.yaml

@@ -166,11 +166,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/lib/cinder
+            - { 'path': /var/lib/cinder, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/cinder
+            - { 'path': /var/log/containers/cinder, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/cinder, 'setype': svirt_sandbox_file_t }
         - name: cinder logs readme
           copy:
             dest: /var/log/cinder/readme.txt

docker/services/cinder-common.yaml

@@ -60,11 +60,13 @@ outputs:
     value:
       - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/cinder
+          - { 'path': /var/log/containers/cinder, 'setype': svirt_sandbox_file_t }
-          - /var/lib/cinder
+          - { 'path': /var/lib/cinder, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/cinder, 'setype': svirt_sandbox_file_t }
       - name: cinder logs readme
         copy:
           dest: /var/log/cinder/readme.txt

docker/services/cinder-scheduler.yaml

@@ -138,10 +138,12 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/cinder
+            - { 'path': /var/log/containers/cinder, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/cinder, 'setype': svirt_sandbox_file_t }
         - name: cinder logs readme
           copy:
             dest: /var/log/cinder/readme.txt

docker/services/congress.yaml

@@ -136,10 +136,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/congress
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/congress, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/congress, 'setype': svirt_sandbox_file_t }
         - name: congress logs readme
           copy:
             dest: /var/log/congress/readme.txt

docker/services/database/mongodb.yaml

@@ -150,11 +150,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/mongodb
+            - { 'path': /var/log/mongodb, 'setype': svirt_sandbox_file_t }
-            - /var/lib/mongodb
+            - { 'path': /var/lib/mongodb, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/mongodb, 'setype': svirt_sandbox_file_t }
         - name: mongodb logs readme
           copy:
             dest: /var/log/mongodb/readme.txt

docker/services/database/mysql.yaml

@@ -233,11 +233,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/mysql
+            - {'path': /var/log/containers/mysql, 'setype': 'svirt_sandbox_file_t'}
-            - /var/lib/mysql
+            - {'path': /var/lib/mysql, 'setype': 'svirt_sandbox_file_t'}
+            - {'path': /var/log/mariadb, 'setype': 'svirt_sandbox_file_t'}
         - name: mysql logs readme
           copy:
             dest: /var/log/mariadb/readme.txt

docker/services/database/redis.yaml

@@ -157,9 +157,11 @@ outputs:
           file:
             path: "{{ item }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/redis
+            - { 'path': /var/log/containers/redis, 'setype': svirt_sandbox_file_t }
-            - /var/run/redis
+            - { 'path': /var/run/redis, 'setype': container_var_run_t }
+            - { 'path': /var/log/redis, 'setype': svirt_sandbox_file_t }
         - name: redis logs readme
           copy:
             dest: /var/log/redis/readme.txt

docker/services/designate-api.yaml

@@ -141,10 +141,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/designate-central.yaml

@@ -159,10 +159,14 @@ outputs:
                   - /var/log/containers/designate:/var/log/designate
             command: "/usr/bin/bootstrap_host_exec designate_central su designate -s /bin/bash -c '/bin/designate-manage pool update'"
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/designate-mdns.yaml

@@ -121,10 +121,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/designate-producer.yaml

@@ -122,10 +122,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/designate-sink.yaml

@@ -122,10 +122,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/designate-worker.yaml

@@ -163,10 +163,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/designate
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/designate, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/designate, 'setype': svirt_sandbox_file_t }
         - name: designate logs readme
           copy:
             dest: /var/log/designate/readme.txt

docker/services/ec2-api.yaml

@@ -199,13 +199,16 @@ outputs:
                       - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
                 - {}
       host_prep_tasks:
-        - name: create persistent log directories
+        - name: create persistent directories
           file:
-            path: /var/log/containers/{{ item }}
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - ec2_api
+            - { 'path': /var/log/containers/ec2_api, 'setype': svirt_sandbox_file_t }
-            - ec2_api_metadata
+            - { 'path': /var/log/containers/ec2_api_metadata, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ec2_api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ec2_api_metadata, 'setype': svirt_sandbox_file_t }
         - name: ec2_api logs readme
           copy:
             dest: /var/log/{{ item }}/readme.txt

docker/services/fluentd.yaml

@@ -105,10 +105,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory for fluentd
+        - name: create persistent directories
           file:
-            path: /var/log/containers/fluentd
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/fluentd, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/fluentd, 'setype': svirt_sandbox_file_t }
         - name: fluentd logs readme
           copy:
             dest: /var/log/fluentd/readme.txt

docker/services/gnocchi-api.yaml

@@ -230,11 +230,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent logs directory
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/gnocchi
+            - { 'path': /var/log/containers/gnocchi, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/gnocchi-api
+            - { 'path': /var/log/containers/httpd/gnocchi-api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/gnocchi, 'setype': svirt_sandbox_file_t }
         - name: gnocchi logs readme
           copy:
             dest: /var/log/gnocchi/readme.txt

docker/services/gnocchi-metricd.yaml

@@ -139,10 +139,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/gnocchi
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/gnocchi, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/gnocchi, 'setype': svirt_sandbox_file_t }
         - name: gnocchi logs readme
           copy:
             dest: /var/log/gnocchi/readme.txt

docker/services/gnocchi-statsd.yaml

@@ -139,10 +139,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/gnocchi
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/gnocchi, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/gnocchi, 'setype': svirt_sandbox_file_t }
         - name: gnocchi logs readme
           copy:
             dest: /var/log/gnocchi/readme.txt

docker/services/haproxy.yaml

@@ -295,11 +295,13 @@ outputs:
         - {get_attr: [HAProxyBase, role_data, host_prep_tasks]}
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/haproxy
+            - { 'path': /var/log/containers/haproxy, 'setype': svirt_sandbox_file_t }
-            - /var/lib/haproxy
+            - { 'path': /var/lib/haproxy, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/haproxy, 'setype': svirt_sandbox_file_t }
         - name: haproxy logs readme
           copy:
             dest: /var/log/haproxy/readme.txt

docker/services/horizon.yaml

@@ -172,13 +172,15 @@ outputs:
               - ENABLE_ZAQAR=no
               - ENABLE_ZUN=no
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/horizon
+            - { 'path': /var/log/containers/horizon, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/horizon
+            - { 'path': /var/log/containers/httpd/horizon, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/horizon, 'setype': svirt_sandbox_file_t }
         - name: horizon logs readme
           copy:
             dest: /var/log/horizon/readme.txt

docker/services/ironic-api.yaml

@@ -140,13 +140,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/ironic
+            - { 'path': /var/log/containers/ironic, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/ironic-api
+            - { 'path': /var/log/containers/httpd/ironic-api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ironic, 'setype': svirt_sandbox_file_t }
         - name: ironic logs readme
           copy:
             dest: /var/log/ironic/readme.txt

docker/services/ironic-conductor.yaml

@@ -198,11 +198,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/ironic
+            - { 'path': /var/log/containers/ironic, 'setype': svirt_sandbox_file_t }
-            - /var/lib/ironic
+            - { 'path': /var/lib/ironic, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ironic, 'setype': svirt_sandbox_file_t }
         - name: ironic logs readme
           copy:
             dest: /var/log/ironic/readme.txt

docker/services/ironic-inspector.yaml

@@ -220,10 +220,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent ironic-inspector logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/ironic-inspector
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/ironic-inspector, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ironic-inspector, 'setype': svirt_sandbox_file_t }
         - name: ironic-inspector logs readme
           copy:
             dest: /var/log/ironic-inspector/readme.txt

docker/services/ironic-pxe.yaml

@@ -158,12 +158,14 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/lib/ironic
+            - { 'path': /var/lib/ironic, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/ironic
+            - { 'path': /var/log/containers/ironic, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/ironic-pxe
+            - { 'path': /var/log/containers/httpd/ironic-pxe, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/ironic, 'setype': svirt_sandbox_file_t }
         - name: ironic logs readme
           copy:
             dest: /var/log/ironic/readme.txt

docker/services/keepalived.yaml

@@ -108,11 +108,15 @@ outputs:
       host_prep_tasks:
         - name: create persistent logs directory
           file:
-            path: /var/log/containers/keepalived
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/keepalived, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/keepalived, 'setype': svirt_sandbox_file_t }
         - name: keepalived logs readme
           copy:
-            dest: /var/log/keepalived-readme.txt
+            dest: /var/log/keepalived/readme.txt
             content: |
               Log files from keepalived containers can be found under
               /var/log/containers/keepalived.

docker/services/logging/files/barbican-api.yaml

@@ -32,13 +32,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/barbican
+          - { 'path': /var/log/containers/barbican, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/barbican-api
+          - { 'path': /var/log/containers/httpd/barbican-api, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/barbican, 'setype': svirt_sandbox_file_t }
       - name: barbican logs readme
         copy:
           dest: /var/log/barbican/readme.txt

docker/services/logging/files/glance-api.yaml

@@ -32,10 +32,12 @@ outputs:
     value:
       - name: create persistent logs directory
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/glance
+          - { 'path': /var/log/containers/glance, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/glance, 'setype': svirt_sandbox_file_t }
       - name: glance logs readme
         copy:
           dest: /var/log/glance/readme.txt

docker/services/logging/files/heat-api-cfn.yaml

@@ -19,13 +19,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/heat
+          - { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/heat-api-cfn
+          - { 'path': /var/log/containers/httpd/heat-api-cfn, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
       - name: heat logs readme
         copy:
           dest: /var/log/heat/readme.txt

docker/services/logging/files/heat-api.yaml

@@ -19,13 +19,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/heat
+          - { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/heat-api
+          - { 'path': /var/log/containers/httpd/heat-api, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
       - name: heat logs readme
         copy:
           dest: /var/log/heat/readme.txt

docker/services/logging/files/heat-engine.yaml

@@ -33,10 +33,14 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: /var/log/containers/heat
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
+        with_items:
+          - { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
       - name: heat logs readme
         copy:
           dest: /var/log/heat/readme.txt

docker/services/logging/files/keystone.yaml

@@ -33,13 +33,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/keystone
+          - { 'path': /var/log/containers/keystone, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/keystone
+          - { 'path': /var/log/containers/httpd/keystone, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/keystone, 'setype': svirt_sandbox_file_t }
       - name: keystone logs readme
         copy:
           dest: /var/log/keystone/readme.txt

docker/services/logging/files/neutron-api.yaml

@@ -41,13 +41,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/neutron
+          - { 'path': /var/log/containers/neutron, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/neutron-api
+          - { 'path': /var/log/containers/httpd/neutron-api, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/neutron, 'setype': svirt_sandbox_file_t }
       - name: neutron logs readme
         copy:
           dest: /var/log/neutron/readme.txt

docker/services/logging/files/neutron-common.yaml

@@ -30,12 +30,14 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/neutron
+          - { 'path': /var/log/containers/neutron, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/neutron, 'setype': svirt_sandbox_file_t }
       - name: neutron logs readme
         copy:
           dest: /var/log/neutron/readme.txt

docker/services/logging/files/nova-api.yaml

@@ -31,13 +31,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/nova
+          - { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/nova-api
+          - { 'path': /var/log/containers/httpd/nova-api, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
       - name: nova logs readme
         copy:
           dest: /var/log/nova/readme.txt

docker/services/logging/files/nova-common.yaml

@@ -51,10 +51,14 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: /var/log/containers/nova
+          path: "{{ item.path }}"
+          setype: "{{ item.setype }}"
           state: directory
+        with_items:
+          - { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
       - name: nova logs readme
         copy:
           dest: /var/log/nova/readme.txt

docker/services/logging/files/nova-metadata.yaml

@@ -30,13 +30,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/nova
+          - { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/nova-metadata
+          - { 'path': /var/log/containers/httpd/nova-metadata, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
       - name: nova logs readme
         copy:
           dest: /var/log/nova/readme.txt

docker/services/logging/files/nova-placement.yaml

@@ -30,13 +30,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/nova
+          - { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/nova-placement
+          - { 'path': /var/log/containers/httpd/nova-placement, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
       - name: nova logs readme
         copy:
           dest: /var/log/nova/readme.txt

docker/services/logging/files/opendaylight-api.yaml

@@ -17,16 +17,17 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/opendaylight/karaf/logs
+          - { 'path': /var/log/containers/opendaylight/karaf/logs, 'setype': svirt_sandbox_file_t }
-          - /var/log/opendaylight
+          - { 'path': /var/log/opendaylight, 'setype': svirt_sandbox_file_t }
       - name: opendaylight logs readme
         copy:
           dest: /var/log/opendaylight/readme.txt
           content: |
             Logs from OpenDaylight container can be found at /var/log/containers/opendaylight/karaf/logs/karaf.log
-        ignore_errors: true
+        ignore_errors: true

docker/services/logging/files/panko-api.yaml

@@ -32,13 +32,15 @@ outputs:
   host_prep_tasks:
     description: Extra ansible tasks needed for logging to files in the host.
     value:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
           state: directory
+          setype: "{{ item.setype }}"
         with_items:
-          - /var/log/containers/panko
+          - { 'path': /var/log/containers/panko, 'setype': svirt_sandbox_file_t }
-          - /var/log/containers/httpd/panko-api
+          - { 'path': /var/log/containers/httpd/panko-api, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/panko, 'setype': svirt_sandbox_file_t }
       - name: panko logs readme
         copy:
           dest: /var/log/panko/readme.txt

docker/services/manila-api.yaml

@@ -124,13 +124,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: Create persistent manila logs directory
+        - name: Create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/manila
+            - { 'path': /var/log/containers/manila, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/manila-api
+            - { 'path': /var/log/containers/httpd/manila-api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/manila, 'setype': svirt_sandbox_file_t }
         - name: manila logs readme
           copy:
             dest: /var/log/manila/readme.txt

docker/services/manila-scheduler.yaml

@@ -109,10 +109,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: Create persistent manila logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/manila
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/manila, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/manila, 'setype': svirt_sandbox_file_t }
         - name: manila logs readme
           copy:
             dest: /var/log/manila/readme.txt

docker/services/manila-share.yaml

@@ -124,11 +124,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/manila
+            - { 'path': /var/log/containers/manila, 'setype': svirt_sandbox_file_t }
-            - /var/lib/manila
+            - { 'path': /var/lib/manila, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/manila, 'setype': svirt_sandbox_file_t }
         - name: manila logs readme
           copy:
             dest: /var/log/manila/readme.txt

docker/services/memcached.yaml

@@ -89,9 +89,16 @@ outputs:
                   - /var/lib/config-data/memcached/etc/sysconfig/memcached:/etc/sysconfig/memcached:ro
             command: ['/bin/bash', '-c', 'source /etc/sysconfig/memcached; /usr/bin/memcached -p ${PORT} -u ${USER} -m ${CACHESIZE} -c ${MAXCONN} $OPTIONS']
       host_prep_tasks:
+        - name: create persistent directories
+          file:
+            path: "{{ item.path }}"
+            state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/memcached, 'setype': svirt_sandbox_file_t }
         - name: memcached logs readme
           copy:
-            dest: /var/log/memcached-readme.txt
+            dest: /var/log/memcached/readme.txt
             content: |
               Memcached container logs to stdout/stderr only.
           ignore_errors: true

docker/services/messaging/notify-rabbitmq.yaml

@@ -213,11 +213,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/messaging/rpc-rabbitmq.yaml

@@ -213,11 +213,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/metrics/collectd.yaml

@@ -116,10 +116,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/collectd
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/collectd, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/collectd, 'setype': svirt_sandbox_file_t }
         - name: collectd logs readme
           copy:
             dest: /var/log/collectd/readme.txt

docker/services/mistral-api.yaml

@@ -153,10 +153,14 @@ outputs:
             # the Mistral API image so that we get tripleo* actions
             command: "/usr/bin/bootstrap_host_exec mistral_api su mistral -s /bin/bash -c 'mistral-db-manage --config-file /etc/mistral/mistral.conf populate'"
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/mistral
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/mistral, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/mistral, 'setype': svirt_sandbox_file_t }
         - name: mistral logs readme
           copy:
             dest: /var/log/mistral/readme.txt

docker/services/mistral-engine.yaml

@@ -123,10 +123,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/mistral
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/mistral, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/mistral, 'setype': svirt_sandbox_file_t }
         - name: mistral logs readme
           copy:
             dest: /var/log/mistral/readme.txt

docker/services/mistral-event-engine.yaml

@@ -123,10 +123,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/mistral
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/mistral, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/mistral, 'setype': svirt_sandbox_file_t }
         - name: mistral logs readme
           copy:
             dest: /var/log/mistral/readme.txt

docker/services/mistral-executor.yaml

@@ -166,10 +166,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/mistral
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/mistral, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/mistral, 'setype': svirt_sandbox_file_t }
         - name: mistral logs readme
           copy:
             dest: /var/log/mistral/readme.txt

docker/services/nova-ironic.yaml

@@ -148,11 +148,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/nova
+            - { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
-            - /var/lib/nova
+            - { 'path': /var/lib/nova, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
         - name: nova logs readme
           copy:
             dest: /var/log/nova/readme.txt

docker/services/novajoin.yaml

@@ -210,6 +210,21 @@ outputs:
           set_fact:
             ipa_otp: {get_param: NovajoinIpaOtp}
           no_log: true
+        - name: create persistent directories
+          file:
+            path: "{{ item.path }}"
+            state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/novajoin, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/novajoin, 'setype': svirt_sandbox_file_t }
+        - name: novajoin logs readme
+          copy:
+            dest: /var/log/novajoin/readme.txt
+            content: |
+              Log files from novajoin containers can be found under
+              /var/log/containers/novajoin
+          ignore_errors: true
         - name: Enroll to FreeIPA
           command: ipa-client-install -U --password={{ ipa_otp }}
           args:

docker/services/octavia-api.yaml

@@ -209,13 +209,15 @@ outputs:
                       - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
                 - {}
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/octavia
+            - { 'path': /var/log/containers/octavia, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/octavia-api
+            - { 'path': /var/log/containers/httpd/octavia-api, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/octavia, 'setype': svirt_sandbox_file_t }
         - name: octavia logs readme
           copy:
             dest: /var/log/octavia/readme.txt

docker/services/octavia-health-manager.yaml

@@ -135,10 +135,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/octavia
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/octavia, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/octavia, 'setype': svirt_sandbox_file_t }
         - name: octavia logs readme
           copy:
             dest: /var/log/octavia/readme.txt

docker/services/octavia-housekeeping.yaml

@@ -131,10 +131,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/octavia
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/octavia, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/octavia, 'setype': svirt_sandbox_file_t }
         - name: octavia logs readme
           copy:
             dest: /var/log/octavia/readme.txt

docker/services/octavia-worker.yaml

@@ -143,10 +143,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/octavia
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/octavia, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/octavia, 'setype': svirt_sandbox_file_t }
         - name: octavia logs readme
           copy:
             dest: /var/log/octavia/readme.txt

docker/services/ovn-controller.yaml

@@ -128,10 +128,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/openvswitch
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/openvswitch, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/openvswitch, 'setype': svirt_sandbox_file_t }
         - name: openvswitch logs readme
           copy:
             dest: /var/log/openvswitch/readme.txt

docker/services/ovn-dbs.yaml

@@ -194,11 +194,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/openvswitch
+            - { 'path': /var/log/containers/openvswitch, 'setype': svirt_sandbox_file_t }
-            - /var/lib/openvswitch/ovn
+            - { 'path': /var/lib/openvswitch/ovn, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/openvswitch, 'setype': svirt_sandbox_file_t }
         - name: openvswitch logs readme
           copy:
             dest: /var/log/openvswitch/readme.txt

docker/services/pacemaker/cinder-backup.yaml

@@ -246,11 +246,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/lib/cinder
+            - { 'path': /var/log/containers/cinder, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/cinder
+            - { 'path': /var/lib/cinder, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/cinder, 'setype': svirt_sandbox_file_t }
         - name: cinder logs readme
           copy:
             dest: /var/log/cinder/readme.txt

docker/services/pacemaker/database/mysql.yaml

@@ -306,11 +306,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/log/containers/mysql
+            - {'path': /var/log/containers/mysql, 'setype': 'svirt_sandbox_file_t'}
-            - /var/lib/mysql
+            - {'path': /var/lib/mysql, 'setype': 'svirt_sandbox_file_t'}
+            - {'path': /var/log/mariadb, 'setype': 'svirt_sandbox_file_t'}
         - name: mysql logs readme
           copy:
             dest: /var/log/mariadb/readme.txt

docker/services/pacemaker/database/redis.yaml

@@ -288,12 +288,14 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
           with_items:
-            - /var/lib/redis
+            - { 'path': /var/lib/redis, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/redis
+            - { 'path': /var/log/containers/redis, 'setype': svirt_sandbox_file_t }
-            - /var/run/redis
+            - { 'path': /var/run/redis, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/redis, 'setype': svirt_sandbox_file_t }
         - name: redis logs readme
           copy:
             dest: /var/log/redis/readme.txt

docker/services/pacemaker/manila-share.yaml

@@ -213,11 +213,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/log/containers/manila
+            - { 'path': /var/log/containers/manila, 'setype': svirt_sandbox_file_t }
-            - /var/lib/manila
+            - { 'path': /var/lib/manila, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/manila, 'setype': svirt_sandbox_file_t }
         - name: manila logs readme
           copy:
             dest: /var/log/manila/readme.txt

docker/services/pacemaker/notify-rabbitmq.yaml

@@ -255,11 +255,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/pacemaker/ovn-dbs.yaml

@@ -199,11 +199,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/log/containers/openvswitch
+            - { 'path': /var/log/containers/openvswitch, 'setype': svirt_sandbox_file_t }
-            - /var/lib/openvswitch/ovn
+            - { 'path': /var/lib/openvswitch/ovn, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/openvswitch, 'setype': svirt_sandbox_file_t }
         - name: openvswitch logs readme
           copy:
             dest: /var/log/openvswitch/readme.txt

docker/services/pacemaker/rabbitmq.yaml

@@ -254,11 +254,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/pacemaker/rpc-rabbitmq.yaml

@@ -257,11 +257,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/qdrouterd.yaml

@@ -107,13 +107,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-      - name: create persistent logs directory
+      - name: create persistent directories
         file:
-          path: "{{ item }}"
+          path: "{{ item.path }}"
+          setype: "{{ item.setype }}"
           state: directory
         with_items:
-          - /var/log/containers/qdrouterd
+          - { 'path': /var/log/containers/qdrouterd, 'setype': svirt_sandbox_file_t }
-          - /var/lib/qdrouterd
+          - { 'path': /var/lib/qdrouterd, 'setype': svirt_sandbox_file_t }
+          - { 'path': /var/log/qdrouterd, 'setype': svirt_sandbox_file_t }
       - name: qrouterd logs readme
         copy:
           dest: /var/log/qrouterd/readme.txt

docker/services/rabbitmq.yaml

@@ -212,11 +212,13 @@ outputs:
       host_prep_tasks:
         - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/log/containers/rabbitmq
+            - { 'path': /var/log/containers/rabbitmq, 'setype': svirt_sandbox_file_t }
-            - /var/lib/rabbitmq
+            - { 'path': /var/lib/rabbitmq, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/rabbitmq, 'setype': svirt_sandbox_file_t }
         - name: rabbitmq logs readme
           copy:
             dest: /var/log/rabbitmq/readme.txt

docker/services/sahara-api.yaml

@@ -143,14 +143,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create /var/lib/sahara
+        - name: create persistent directories
           file:
-            path: /var/lib/sahara
+            path: "{{ item.path }}"
-            state: directory
-        - name: create persistent sahara logs directory
-          file:
-            path: /var/log/containers/sahara
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/sahara, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/lib/sahara, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/sahara, 'setype': svirt_sandbox_file_t }
         - name: sahara logs readme
           copy:
             dest: /var/log/sahara/readme.txt

docker/services/sahara-engine.yaml

@@ -133,14 +133,15 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create /var/lib/sahara
+        - name: create persistent directories
           file:
-            path: /var/lib/sahara
+            path: "{{ item.path }}"
-            state: directory
-        - name: create persistent sahara logs directory
-          file:
-            path: /var/log/containers/sahara
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/sahara, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/lib/sahara, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/sahara, 'setype': svirt_sandbox_file_t }
         - name: sahara logs readme
           copy:
             dest: /var/log/sahara/readme.txt

docker/services/sensu-client.yaml

@@ -151,10 +151,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/sensu
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/containers/sensu, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/sensu, 'setype': svirt_sandbox_file_t }
         - name: sensu logs readme
           copy:
             dest: /var/log/sensu/readme.txt

docker/services/tacker.yaml

@@ -133,10 +133,14 @@ outputs:
             environment:
               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: /var/log/containers/tacker
+            path: "{{ item.path }}"
             state: directory
+            setype: "{{ item.setype }}"
+          with_items:
+            - { 'path': /var/log/tacker, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/containers/tacker, 'setype': svirt_sandbox_file_t }
         - name: tacker logs readme
           copy:
             dest: /var/log/tacker/readme.txt

docker/services/tempest.yaml

@@ -55,13 +55,14 @@ outputs:
               - /var/log/containers/tempest:/var/log/tempest
             command: ['/bin/bash', '-c', 'chown -R tempest:tempest /var/log/tempest']
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/log/containers/tempest
+            - { 'path': /var/log/containers/tempest, 'setype': svirt_sandbox_file_t }
-            - /var/log/tempest
+            - { 'path': /var/log/tempest, 'setype': svirt_sandbox_file_t }
         - name: Tempest logs readme
           copy:
             dest: /var/log/tempest/readme.txt

docker/services/zaqar.yaml

@@ -184,13 +184,15 @@ outputs:
                 environment:
                   - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
       host_prep_tasks:
-        - name: create persistent logs directory
+        - name: create persistent directories
           file:
-            path: "{{ item }}"
+            path: "{{ item.path }}"
+            setype: "{{ item.setype }}"
             state: directory
           with_items:
-            - /var/log/containers/zaqar
+            - { 'path': /var/log/containers/zaqar, 'setype': svirt_sandbox_file_t }
-            - /var/log/containers/httpd/zaqar
+            - { 'path': /var/log/containers/httpd/zaqar, 'setype': svirt_sandbox_file_t }
+            - { 'path': /var/log/zaqar, 'setype': svirt_sandbox_file_t }
         - name: zaqar logs readme
           copy:
             dest: /var/log/zaqar/readme.txt