We should explicitly install ceph-selinux when using Ceph Hammer

[Giulio Fidente]

The Ceph Jewel packages pull in ceph-selinux as a dependency but the Ceph Hammer packages do not.

Yet from 0.94.3 Ceph Hammer can run in enforcing mode as well, so we should explicitly add ceph-selinux to the overcloud image packages for Mitaka (Newton works with Jewel)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/373998
Committed: https://git.openstack.org/cgit/openstack/tripleo-puppet-elements/commit/?id=caed41ba989fb0b8dfdd061f09cf844099a1ad25
Submitter: Jenkins
Branch: stable/mitaka

commit caed41ba989fb0b8dfdd061f09cf844099a1ad25
Author: Giulio Fidente <email address hidden>
Date: Tue Sep 20 21:53:16 2016 +0200

    Install ceph-selinux in overcloud-{controller,cephstorage} images

    Latest versions of Ceph/Hammer can work with SELinux in 'enforcing'
    mode so we do not default to 'permissive' from change [1]. This
    will only work if the 'ceph-selinux' package is installed and while
    Ceph/Jewel packages pull it in as a dependency, Ceph/Hammer will
    not so we need to list it explicitly.

    1. I469f2bd429eba23b2010b7380e794c67b18e7a47

    Closes-Bug: 1626926
    Change-Id: I5ad512bc3a948ba54af1a67cb980d42536940ad0

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-puppet-elements 3.2.0 release.