Hello, In order to have an easy way to collect the logs for the container healthchecks (managed via systemd timers), it would be really nice to set the "SyslogIdentified" in the healthcheck units - maybe something like "container-healthcheck". This would allow to filter those logs at (r)syslog level and push them in a dedicated file, allowing for better monitoring via collectd/sensu without the need to call journald from within a container (this creates "some" SELinux issues due to the need of dbus and some other things). This change is mandatory in order to be able to correct some SELinux policy that was added some time ago[1] [1] https://bugzilla.redhat.com/show_bug.cgi?id=1738134
Upstream for Stein (osp-15) in the pipe.
In order to verify this BZ, one can deploy an undercloud|standalone on osp-15 with the related paunch version, and ensure the container service unit files have the new "SyslogIdentifier" instruction.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0643