Bug 1308271

Summary: openstack-selinux package should be a dependency for all openstack components
Product: Red Hat OpenStack Reporter: Thomas Crowe <tcrowe>
Component: openstack-selinuxAssignee: Ryan Hallisey <rhallise>
Status: CLOSED WONTFIX QA Contact: Udi Shkalim <ushkalim>
Severity: low Docs Contact:
Priority: unspecified    
Version: 8.0 (Liberty)CC: lhh, mburns, mgrepl, srevivo
Target Milestone: ---Keywords: ZStream
Target Release: 8.0 (Liberty)   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-01-13 17:03:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Thomas Crowe 2016-02-13 23:06:03 UTC
Description of problem:
Installing a multi-node setup of OpenStack manually; Keystone installation went fine and the openstack-selinux pacakge was installed as expected.  However when I installed the Glance component on another node (using `yum install openstack-glance`) all dependancies were installed with the exception of openstack-selinux.

This resulted in several non-specific connectivity error in the glance-api.log and assocaited logs.  AVC errors were logged in the messages file however (had I checked there sooner would have saved quite a bit of troubleshooting). 

Version-Release number of selected component (if applicable):
openstack-glance-11.0.0-1.el7ost.noarch

How reproducible:
consistently

Steps to Reproduce:
1.install openstack-glance on a node with no other openstack components
2.
3.

Actual results:
openstack-selinux is not installed

Expected results:
openstack-selinux should (IMHO) be installed

Additional info:

Comment 2 Mike Burns 2017-01-13 17:03:12 UTC
The policy is that openstack must work with selinux enabled, but having selinux enabled is not a requirement to run openstack.  If you want openstack and selinux, you need to install openstack-selinux yourself.  

For director deployed openstack, we've included openstack-selinux ootb.