Browse Source

Disable fapolicyd service (#10081)

pull/10252/head
Tiago Epifânio 1 year ago
committed by GitHub
parent
commit
eb31653d66
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 0 deletions
  1. 4
      roles/kubernetes/preinstall/defaults/main.yml
  2. 8
      roles/kubernetes/preinstall/tasks/0080-system-configurations.yml

4
roles/kubernetes/preinstall/defaults/main.yml

@ -144,5 +144,9 @@ debian_os_family_extensions:
# Sets DNSStubListener=no, useful if you get "0.0.0.0:53: bind: address already in use"
systemd_resolved_disable_stub_listener: "{{ ansible_os_family in ['Flatcar', 'Flatcar Container Linux by Kinvolk'] }}"
# Used to disable File Access Policy Daemon service.
# If service is enabled, the CNI plugin installation will fail
disable_fapolicyd: true
# Enable 0120-growpart-azure-centos-7 tasks
growpart_azure_enabled: true

8
roles/kubernetes/preinstall/tasks/0080-system-configurations.yml

@ -136,3 +136,11 @@
state: present
reload: yes
with_items: "{{ additional_sysctl }}"
- name: Disable fapolicyd service
failed_when: false
systemd:
name: fapolicyd
state: stopped
enabled: false
when: disable_fapolicyd
Loading…
Cancel
Save