Fedora and RHEL use etc_t and the convention is <type_name>_t (#7891)

* Fedora and RHEL use etc_t and the convention is <type_name>_t

* Docs: specify all values for preinstall_selinux_state

* CI: Add Fedora 34 with SELinux in enforcing mode
This commit is contained in:
Cristian Calin
2021-08-28 00:20:53 +03:00
committed by GitHub
parent 425b6741c6
commit 1afdb05ea9
5 changed files with 24 additions and 3 deletions

View File

@@ -17,7 +17,7 @@
template:
src: "kubelet.env.{{ kubeletConfig_api_version }}.j2"
dest: "{{ kube_config_dir }}/kubelet.env"
setype: "{{ (preinstall_selinux_state == 'enforcing') | ternary('t_etc', omit) }}"
setype: "{{ (preinstall_selinux_state != 'disabled') | ternary('etc_t', omit) }}"
backup: yes
mode: 0640
notify: Node | restart kubelet