diff --git a/doc/file.README.html b/doc/file.README.html index 135f5c5..7c5760f 100644 --- a/doc/file.README.html +++ b/doc/file.README.html @@ -186,7 +186,7 @@

SELINUX

-

All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.

+

All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to enforce (not controlled within this module) and hy_show_statsis set to true, the parameter hy_selinux_allow_stats must also be set to true, else the haproxy service will not start as selinux will not allow it.

Known Problems

diff --git a/doc/index.html b/doc/index.html index 015b6c7..48badd7 100644 --- a/doc/index.html +++ b/doc/index.html @@ -186,7 +186,7 @@

SELINUX

-

All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.

+

All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to enforce (not controlled within this module) and hy_show_statsis set to true, the parameter hy_selinux_allow_stats must also be set to true, else the haproxy service will not start as selinux will not allow it.

Known Problems

diff --git a/doc/puppet_classes/confdroid_haproxy_3A_3Amain_3A_3Aconfig.html b/doc/puppet_classes/confdroid_haproxy_3A_3Amain_3A_3Aconfig.html index d789c2a..9ed838a 100644 --- a/doc/puppet_classes/confdroid_haproxy_3A_3Amain_3A_3Aconfig.html +++ b/doc/puppet_classes/confdroid_haproxy_3A_3Amain_3A_3Aconfig.html @@ -109,7 +109,13 @@ 11 12 13 -14 +14 +15 +16 +17 +18 +19 +20
# File 'manifests/main/config.pp', line 6
@@ -122,6 +128,12 @@ class confdroid_haproxy::main::config (
   if $hy_manage_fail2ban == true {
     include confdroid_haproxy::monitoring::fail2ban
   }
+
+  if $hy_selinux_allow_stats == true {
+    exec { 'setsebool haproxy_connect_any on':
+      path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+    }
+  }
 }
diff --git a/doc/puppet_classes/confdroid_haproxy_3A_3Aparams.html b/doc/puppet_classes/confdroid_haproxy_3A_3Aparams.html index c71ce8b..372d73e 100644 --- a/doc/puppet_classes/confdroid_haproxy_3A_3Aparams.html +++ b/doc/puppet_classes/confdroid_haproxy_3A_3Aparams.html @@ -861,6 +861,24 @@ —

whether to manage backend users

+
+ + + +
  • + + hy_selinux_allow_stats + + + (Boolean) + + + (defaults to: false) + + + — +
    +

    whether to allow stats in selinux

  • @@ -876,7 +894,6 @@
     
     
    -58
     59
     60
     61
    @@ -964,10 +981,14 @@
     143
     144
     145
    -146
    +146 +147 +148 +149 +150 -
    # File 'manifests/params.pp', line 58
    +        
    # File 'manifests/params.pp', line 59
     
     class confdroid_haproxy::params (
     
    @@ -983,6 +1004,9 @@ class confdroid_haproxy::params (
     # fail2ban
       Boolean $hy_manage_fail2ban         = false,
     
    +# selinux
    +  Boolean $hy_selinux_allow_stats     = false,
    +
     # main config
       String $hy_http_port                = '80',
       String $hy_https_port               = '443',