From 43ca24ead2d06426ef5657812e1ca3307b755e26 Mon Sep 17 00:00:00 2001
From: Pierre Blanc <pblanc@redhat.com>
Date: Thu, 5 Nov 2015 14:36:18 -0500
Subject: [PATCH] Fix the wrong selinux context when glance uses nfs backend

We updated the pacemaker resource configuration
of fs-varlibglanceimages-clone to mount nfs directory
with a specified context.

Details on : https://bugzilla.redhat.com/show_bug.cgi?id=1237150

Change-Id: Ia0dd471858f470ae3e82d25151ebe65b8cdbec4f
---
 puppet/manifests/overcloud_controller_pacemaker.pp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/puppet/manifests/overcloud_controller_pacemaker.pp b/puppet/manifests/overcloud_controller_pacemaker.pp
index adb52188..5cadc6dd 100644
--- a/puppet/manifests/overcloud_controller_pacemaker.pp
+++ b/puppet/manifests/overcloud_controller_pacemaker.pp
@@ -526,11 +526,12 @@ if hiera('step') >= 3 {
   $glance_store = concat($http_store, $backend_store)
 
   if $glance_backend == 'file' and hiera('glance_file_pcmk_manage', false) {
+    $secontext = 'context="system_u:object_r:glance_var_lib_t:s0"'
     pacemaker::resource::filesystem { 'glance-fs':
       device       => hiera('glance_file_pcmk_device'),
       directory    => hiera('glance_file_pcmk_directory'),
       fstype       => hiera('glance_file_pcmk_fstype'),
-      fsoptions    => hiera('glance_file_pcmk_options', ''),
+      fsoptions    => join([$secontext, hiera('glance_file_pcmk_options', '')],','),
       clone_params => '',
     }
   }
-- 
2.16.6