Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-36378

Need to set selinux boolean foreman_rails_can_connect_all to true for KubeVirt provisioning

XMLWordPrintable

    • False
    • Low
    • sat-rocket
    • None
    • None
    • None
    • None
    • No

      Description of problem:

      When following https://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html-single/provisioning_hosts/index#adding-kubevirt-connection_kubevirt-provisioning.

      If SELinux is set to Enforcing [1], will need a following step. Otherwise, it will error with "Permission denied - connect(2) for "openshift_fqdn" port xxxx"

      # setsebool -P foreman_rails_can_connect_all on
      # getsebool -a |grep foreman_rails_can_connect_all
      foreman_rails_can_connect_all --> on
      

      How reproducible:

       

      Steps to Reproduce:

      1.  Follow the instructions in the doc

      2. Verify the cert is ok and user has the cluster admin right

      3. Test connection fails with below in /var/log/foreman/production.log

           [E|app|35613e0d] Failed to save: Failed to open TCP connection to opensift_fqdn:xxxx (Permission denied - connect(2) for "openshift_fqdn" port xxxx)

      Actual behavior:
      Test connection fails with (Permission denied - connect(2) for "openshift_fqdn" port xxxx)

      Expected behavior:
      Test connection should work if the proper instruction is provided 

      Business Impact / Additional info:

      Delay the deployment 

              Unassigned Unassigned
              rhn-support-tharring Takae Harrington
              Votes:
              2 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: