From bbab8507fca8ec9d61694d7bb5a5447b993bf244 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Jeanneret?= <cjeanner@redhat.com>
Date: Wed, 5 Sep 2018 17:29:14 +0200
Subject: [PATCH] Allow to deactivate SELinux separation for selected
 containers

Deactivating selinux separation for now will allow haproxy to access
its certificate without any issue.

Change-Id: Ia00219337737dca87f745af5519effc04ce0a620
---
 docker/services/haproxy.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker/services/haproxy.yaml b/docker/services/haproxy.yaml
index e61f2e5037..f20a5488b6 100644
--- a/docker/services/haproxy.yaml
+++ b/docker/services/haproxy.yaml
@@ -229,6 +229,7 @@ outputs:
               image: {get_param: DockerHAProxyImage}
               net: host
               restart: always
+              security_opt: label=disable
               volumes:
                 list_concat:
                   - {get_attr: [ContainersCommon, volumes]}