Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SELinux and icinga2::feature::api #592

Closed
b3n4kh opened this issue Nov 12, 2019 · 1 comment
Closed

SELinux and icinga2::feature::api #592

b3n4kh opened this issue Nov 12, 2019 · 1 comment

Comments

@b3n4kh
Copy link
Contributor

b3n4kh commented Nov 12, 2019

Enabling API Feature with 'puppet' as pki requires second puppetrun to work, if selinux set to Enforcing.

class { 'icinga2::feature::api':
  pki => 'puppet',
}

Expected Behavior

Puppet copies the certificates and starts icinga.

Current Behavior

Puppet failes to start icinga service since the certificates can not be read, due to wrong seltype, even though icinga2-selinux is installed.

Possible Solution

Installing icinga2-selinux not beforehand but during between icinga2 installation and configuration should fix the issue. Example https://github.com/b3n4kh/puppet-icinga2/tree/selinux

Steps to Reproduce (for bugs)

Apply following manifest with selinux set to Enforcing:

package { 'icinga2-selinux':
  ensure => 'installed'
}

include ::icinga2

class { 'icinga2::feature::api':
  pki => 'puppet',
}

Context

Use icinga2 with selinux on Enforcing Mode.

Your Environment

  • Module version (puppet module list): 2.3.0
  • Puppet version (puppet -V): 6.10
  • Operating System and version: RHEL 7.6
@lbetz
Copy link
Contributor

lbetz commented Nov 18, 2019

To solve your problem, the module has the feature to disable the package management.

package { ['icinga2', 'icinga2-selinux']: }

class { 'icinga2':
manage_package => false,
}

Bye
Lennart

@lbetz lbetz added this to the 2.4.0 milestone Nov 18, 2019
@lbetz lbetz removed the enhancement label Jan 13, 2020
@lbetz lbetz removed this from the 2.4.0 milestone Jan 13, 2020
@lbetz lbetz closed this as completed Jan 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants