a035de7d3f
container-selinux is applying a specific label to that location[1]. In order to avoid conflict and keep things clean, openstack-selinux allows container_t to manage files and directories with that new container_log_t context[2]. Note: this patch must NOT be backported to stable/train, but is needed in stable/wallaby (osp-17) in order to be consistent. [1]7e5f3cae10[2]db6cb8e7f0Change-Id: Ic0620f2e619730fa47a0b3feb5ca56d934f1416f
104 lines
2.8 KiB
YAML
104 lines
2.8 KiB
YAML
- name: Create and ensure setype for /var/log/containers directory
|
|
become: true
|
|
file:
|
|
path: /var/log/containers
|
|
state: directory
|
|
selevel: s0
|
|
mode: 0750
|
|
tags:
|
|
- host_config
|
|
|
|
- name: Create ContainerLogStdoutPath directory
|
|
become: true
|
|
file:
|
|
path: "{{ container_log_stdout_path }}"
|
|
state: directory
|
|
selevel: s0
|
|
tags:
|
|
- host_config
|
|
|
|
- name: Create /var/lib/tripleo-config directory
|
|
become: true
|
|
file:
|
|
path: /var/lib/tripleo-config
|
|
state: directory
|
|
setype: container_file_t
|
|
selevel: s0
|
|
recurse: true
|
|
tags:
|
|
- host_config
|
|
- container_config
|
|
- container_config_tasks
|
|
- container_config_scripts
|
|
- container_startup_configs
|
|
|
|
# The container config files
|
|
# /var/lib/container-startup-configs.json is removed as we now write
|
|
# per-step files instead
|
|
- name: Clean old /var/lib/container-startup-configs.json file
|
|
become: true
|
|
file:
|
|
path: /var/lib/container-startup-configs.json
|
|
state: absent
|
|
tags:
|
|
- container_startup_configs
|
|
|
|
# For legacy, can be removed in Train cycle
|
|
- name: Clean old /var/lib/docker-container-startup-configs.json file
|
|
become: true
|
|
file:
|
|
path: /var/lib/docker-container-startup-configs.json
|
|
state: absent
|
|
tags:
|
|
- container_startup_configs
|
|
|
|
- import_tasks: common_container_config_scripts.yaml
|
|
|
|
# This file location is deprecated and the new location is now:
|
|
# /var/lib/tripleo-config/container-startup-config/step_X/<container_name>.json
|
|
# Can be removed in V cycle
|
|
- name: Write /var/lib/tripleo-config/container-startup-config-readme.txt
|
|
become: true
|
|
no_log: True
|
|
copy:
|
|
content: "Container startup configs moved to /var/lib/tripleo-config/container-startup-config"
|
|
dest: /var/lib/tripleo-config/container-startup-config-readme.txt
|
|
force: true
|
|
mode: '0600'
|
|
tags:
|
|
- container_startup_configs
|
|
|
|
- name: Generate startup configs files per step and per container
|
|
become: true
|
|
container_startup_config:
|
|
config_base_dir: /var/lib/tripleo-config/container-startup-config
|
|
config_data: "{{ lookup('file', (tripleo_role_name + '/docker_config.yaml'), errors='ignore') | default({}, True) | from_yaml }}"
|
|
tags:
|
|
- container_startup_configs
|
|
|
|
- name: Create /var/lib/kolla/config_files directory
|
|
become: true
|
|
file:
|
|
path: /var/lib/kolla/config_files
|
|
state: directory
|
|
setype: container_file_t
|
|
selevel: s0
|
|
recurse: true
|
|
tags:
|
|
- container_startup_configs
|
|
|
|
- name: Create /var/lib/config-data directory
|
|
become: true
|
|
file:
|
|
path: /var/lib/config-data
|
|
state: directory
|
|
setype: container_file_t
|
|
selevel: s0
|
|
|
|
- name: Write container config json files
|
|
become: true
|
|
tripleo_container_configs:
|
|
config_data: "{{ lookup('file', tripleo_role_name + '/kolla_config.yaml', errors='ignore') | default({}, True) | from_yaml }}"
|
|
tags:
|
|
- container_startup_configs
|