External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-01-09 23:12:10 -03:30
Code Issues Packages Projects Releases Wiki Activity

Fix for #12435 - setting timezone under SELinux. (#12436)

Browse Source 
Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>
This commit is contained in:
Bas 2025-12-24 12:10:31 +01:00 committed by GitHub
parent b7491b957b
commit e80087df93
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
roles/kubernetes/preinstall/tasks/0081-ntp-configurations.yml
View File

@ -74,8 +74,33 @@
- not is_fedora_coreos - not is_fedora_coreos
- not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"] - not ansible_os_family in ["Flatcar", "Flatcar Container Linux by Kinvolk"]
- name: Set timezone - name: Gather selinux facts
ansible.builtin.setup:
gather_subset: selinux
when:
- ntp_timezone
- ansible_os_family == "RedHat"
- name: Put SELinux in permissive mode, logging actions that would be blocked.
ansible.posix.selinux:
policy: targeted
state: permissive
when:
- ntp_timezone
- ansible_os_family == "RedHat"
- ansible_facts.selinux.mode == 'enforcing'
- name: Set ntp_timezone
community.general.timezone: community.general.timezone:
name: "{{ ntp_timezone }}" name: "{{ ntp_timezone }}"
when: when:
- ntp_timezone - ntp_timezone
- name: Re-enable SELinux
ansible.posix.selinux:
policy: targeted
state: "{{ preinstall_selinux_state }}"
when:
- ntp_timezone
- ansible_os_family == "RedHat"
- ansible_facts.selinux.status == 'enabled'