epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

Disable fapolicyd service (#10081)

Browse Source
This commit is contained in:
Tiago Epifânio
2023-06-24 04:49:06 +01:00
committed by GitHub
parent 180df831ba
commit eb31653d66
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/kubernetes/preinstall/defaults/main.yml
View File

@@ -144,5 +144,9 @@ debian_os_family_extensions:
# Sets DNSStubListener=no, useful if you get "0.0.0.0:53: bind: address already in use" # Sets DNSStubListener=no, useful if you get "0.0.0.0:53: bind: address already in use"
systemd_resolved_disable_stub_listener: "{{ ansible_os_family in ['Flatcar', 'Flatcar Container Linux by Kinvolk'] }}" systemd_resolved_disable_stub_listener: "{{ ansible_os_family in ['Flatcar', 'Flatcar Container Linux by Kinvolk'] }}"
# Used to disable File Access Policy Daemon service.
# If service is enabled, the CNI plugin installation will fail
disable_fapolicyd: true
# Enable 0120-growpart-azure-centos-7 tasks # Enable 0120-growpart-azure-centos-7 tasks
growpart_azure_enabled: true growpart_azure_enabled: true

8
roles/kubernetes/preinstall/tasks/0080-system-configurations.yml
View File

@@ -136,3 +136,11 @@
state: present state: present
reload: yes reload: yes
with_items: "{{ additional_sysctl }}" with_items: "{{ additional_sysctl }}"
- name: Disable fapolicyd service
failed_when: false
systemd:
name: fapolicyd
state: stopped
enabled: false
when: disable_fapolicyd