Bug 1551127

Summary: [Docs] Chapter 6: Add new section for SELinux to match cns-deploy requirements
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Thom Carlin <tcarlin>
Component: doc-Container_Native_Storage_with_OpenShiftAssignee: storage-doc
Status: CLOSED WONTFIX QA Contact: Prasanth <pprakash>
Severity: high Docs Contact:
Priority: unspecified    
Version: cns-3.6CC: annair, asriram, jmulligan, pprakash, rhs-bugs, storage-doc
Target Milestone: ---Keywords: ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-11-18 15:47:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Thom Carlin 2018-03-02 20:33:17 UTC
Document URL: 

https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.3/html-single/container-native_storage_for_openshift_container_platform/#chap-Documentation-Container_Native_Storage

Section Number and Name: 

Chapter 6. Setting up Container-Native Storage

Describe the issue: 

No documentation on SELinux setup required by cns-deploy

Suggestions for improvement: 

Add a new section describing SELinux setup to support CNS.

Additional information: 

cns-deploy:
For systems with SELinux, the following settings need to be considered:
 * virt_sandbox_use_fusefs should be enabled on each node to allow writing to
   remote GlusterFS volumes

Please check with development for steps to be run on each node.

Comment 2 Thom Carlin 2018-03-02 20:34:50 UTC
Encountered in OCP 3.7

Comment 3 Thom Carlin 2018-03-02 20:54:57 UTC
https://bugzilla.redhat.com/show_bug.cgi?id=1282336 has:
* getsebool virt_sandbox_use_fusefs

Additionally, value can be enabled by: setsebool -P virt_sandbox_use_fusefs true