r/collectd-prometheus: Work w/o firewalld, selinux

Tasks that configure the SELinux policy obviously only make sense if the
host uses SELinux.  Similarly, if the host does not use FirewallD,
configuring firewall rules doesn't work.
collectd-buildroot
Dustin 2022-06-28 09:47:18 -05:00
parent dff2ce0754
commit 1c9b64acfa
1 changed files with 3 additions and 0 deletions

View File

@ -21,6 +21,7 @@
dest: /var/lib/selinux/collectd-local.pp
notify:
- install collectd-local selinux module
when: ansible_selinux.status == 'enabled'
tags:
- selinux
@ -40,6 +41,7 @@
permanent: false
immediate: true
state: '{{ "enabled" if collectd_prometheus_allow_outside else "disabled" }}'
when: host_uses_firewalld|d(true)|bool
tags: firewalld
- name: ensure firewall is configured for collectd write_prometheus plugin
@ -48,4 +50,5 @@
permanent: true
immediate: false
state: '{{ "enabled" if collectd_prometheus_allow_outside else "disabled" }}'
when: host_uses_firewalld|d(true)|bool
tags: firewalld