Disabling selinux for the overcloud will disable it on the undercloud

[Alex Schultz]

'overcloud deploy' overrides any change made to the selinux configuration on the undercloud and reverts it to whatever is in the overcloud templates.

Reproducer:

1. deploy undercloud with undercloud_enable_selinux = false in the [DEFAULT] section of undercloud.conf
2. verify selinux is in permissive mode
3. deploy/redeploy the overcloud
4. verify selinux is back to enforcing

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/722812

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/722812
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=07106c501e9e6a8db835a260cdd11fe3945115c1
Submitter: Zuul
Branch: master

commit 07106c501e9e6a8db835a260cdd11fe3945115c1
Author: Alex Schultz <email address hidden>
Date: Fri Apr 24 08:54:30 2020 -0600

    Split out selinux management

    Currently if you have selinux enabled on the undercloud but disable it
    for the overcloud, selinux is disabled on the undercloud during the
    deployment. This can be resolved by only managing the selinux setting
    for the deployment target hosts rather than the all.

    Change-Id: I94b81ea0b954cdba7704720a145b752fa58d4308
    Closes-Bug: #1874828

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/724195

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/724195
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0e2426423ad2be736e17bff7406b3854903c32f1
Submitter: Zuul
Branch: stable/train

commit 0e2426423ad2be736e17bff7406b3854903c32f1
Author: Alex Schultz <email address hidden>
Date: Fri Apr 24 08:54:30 2020 -0600

    Split out selinux management

    Currently if you have selinux enabled on the undercloud but disable it
    for the overcloud, selinux is disabled on the undercloud during the
    deployment. This can be resolved by only managing the selinux setting
    for the deployment target hosts rather than the all.

    Change-Id: I94b81ea0b954cdba7704720a145b752fa58d4308
    Closes-Bug: #1874828
    (cherry picked from commit 07106c501e9e6a8db835a260cdd11fe3945115c1)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 11.4.0 release.