Bug 1638941

Summary: gluster-ansible roles should set the required SELinux labels
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: SATHEESARAN <sasundar>
Component: rhhiAssignee: Sahina Bose <sabose>
Status: CLOSED CURRENTRELEASE QA Contact: SATHEESARAN <sasundar>
Severity: high Docs Contact:
Priority: high    
Version: rhhiv-1.5CC: rhs-bugs, sabose, sankarshan, sasundar, surs
Target Milestone: ---   
Target Release: RHHI-V 1.5   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: gluster-ansible-roles-1.0.3 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1638940 Environment:
Last Closed: 2019-05-20 04:55:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1638940    
Bug Blocks: 1520836    

Description SATHEESARAN 2018-10-13 07:00:35 UTC 
Description of problem:
-----------------------
After creating gluster bricks using gluster-ansible-roles, selinux labels are missing on the XFS bricks

Version-Release number of selected component (if applicable):
---------------------------------------------------------------
gluster-ansible-role-1.0.2-2

How reproducible:
-------------------
Always

Steps to Reproduce:
--------------------
1. Create bricks using gluster-ansible-roles
2. Check for selinux labels on the brick mount

Actual results:
---------------
Missing selinux label on gluster brick mounts

Expected results:
-----------------
Proper selinux label should be set on the brick mounts

Additional info:
-----------------
[root@ ]# ls -lsZ /gluster_bricks/vmstore/
total 0
drwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 vmstore

[root@ ]# ls -lsZ /gluster_bricks/vmstore/vmstore/
total 0
-rwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 __DIRECT_IO_TEST__
drwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 e0522414-519c-43b1-92de-47772d934eb4
Comment 4 SATHEESARAN 2018-10-16 01:01:47 UTC 
As the dependent gluster-ansible bugs is already ON_QA, moving this bug too
Comment 5 SATHEESARAN 2018-10-16 01:02:08 UTC 
Tested with gluster-ansible-roles-1.0.3.

Post RHHI deployment, bricks does have the required selinux labels on them
#  ls -1Z /gluster_bricks/
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 data
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 engine
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 vmstore