set selinux type t_etc if selinux state is enforcing (#7791)

3 years ago · bf54dc082b
1 changed files with 1 additions and 0 deletions
--- a/roles/kubernetes/node/tasks/kubelet.yml
+++ b/roles/kubernetes/node/tasks/kubelet.yml
@ -17,6 +17,7 @@
  template:
    src: "kubelet.env.{{ kubeletConfig_api_version }}.j2"
    dest: "{{ kube_config_dir }}/kubelet.env"
+    setype: "{{ (preinstall_selinux_state == 'enforcing') | ternary('t_etc', omit) }}"
    backup: yes
    mode: 0640
  notify: Node | restart kubelet