14411dcb6a
This change replaces all of the roles references in our various files with the
new role name. This is being done because Ansible no longer allows hyphens in
role names.
TODO: (gchamoul) Remove healthcheck-service-status once this patch is
merged. Tripleo Jobs are RED due to THT trying to execute this
validation as inflight one but it has been renamed healthcheck_service_status.
Co-Authored-by: Gael Chamoulaud <gchamoul@redhat.com>
Change-Id: I19bb587ece403f86ddd0bbe174c282326500cfd3
(cherry picked from commit ceb0f75182)
22 lines
715 B
YAML
22 lines
715 B
YAML
---
|
|
- hosts: all
|
|
vars:
|
|
metadata:
|
|
name: validate-selinux
|
|
description: >-
|
|
Ensures we don't have any SELinux denials on the system
|
|
groups:
|
|
- pre-deployment
|
|
- post-deployment
|
|
- pre-upgrade
|
|
- post-upgrade
|
|
validate_selinux_working_dir: /var/log/validations
|
|
validate_selinux_audit_source: /var/log/audit/audit.log
|
|
validate_selinux_skip_list_dest: "{{ validate_selinux_working_dir }}/denials-skip-list.txt"
|
|
validate_selinux_filtered_denials_dest: "{{ validate_selinux_working_dir }}/denials-filtered.log"
|
|
validate_selinux_strict: false
|
|
validate_selinux_filter: "None"
|
|
validate_selinux_skip_list: {}
|
|
roles:
|
|
- validate_selinux
|