Disable fapolicyd service (#10081)

kubernetes-sigs · Jun 24, 2023 · eb31653 · eb31653
1 parent 180df83
commit eb31653
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/roles/kubernetes/preinstall/defaults/main.yml b/roles/kubernetes/preinstall/defaults/main.yml
@@ -144,5 +144,9 @@ debian_os_family_extensions:
 # Sets DNSStubListener=no, useful if you get "0.0.0.0:53: bind: address already in use"
 systemd_resolved_disable_stub_listener: "{{ ansible_os_family in ['Flatcar', 'Flatcar Container Linux by Kinvolk'] }}"
 
+# Used to disable File Access Policy Daemon service.
+# If service is enabled, the CNI plugin installation will fail
+disable_fapolicyd: true
+
 # Enable 0120-growpart-azure-centos-7 tasks
 growpart_azure_enabled: true
diff --git a/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml b/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml
@@ -136,3 +136,11 @@
     state: present
     reload: yes
   with_items: "{{ additional_sysctl }}"
+
+- name: Disable fapolicyd service
+  failed_when: false
+  systemd:
+    name: fapolicyd
+    state: stopped
+    enabled: false
+  when: disable_fapolicyd