package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1

[chandan kumar]

tripleo-ci-centos-8-undercloud-ffu-wallaby and periodic-tripleo-ci-centos-8-undercloud-upgrade-ffu-wallaby jobs are failing with following error during ffu_undercloud_upgrade.
```
Ensure DNF modules have the right stream | undercloud | item={'distribution_version': '8', 'module': 'container-tools', 'stream': '3.0'} | error={"ansible_loop_var": "item", "changed": false, "failures": [], "item": {"distribution_version": "8", "module": "container-tools", "stream": "3.0"}, "msg": "Depsolve Error occured: \n Problem: package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.7.0+1217+ea57d1f1.noarch\n - cannot install the best candidate for the job", "rc": 1, "results": []}
```

The last passing job is : https://zuul.opendev.org/t/openstack/build/288474fb55c0472c9cb68df93397dcd1 - 2022-09-23 15:43:35

Passing jobs rpm:
container-selinux-2.167.0-1.module_el8.6.0+1107+d59a301b.noarch
udica-0.2.4-1.module_el8.5.0+736+58cc1a5a.noarch

Logs:
[1]. https://dfa69071052ecd0db9f1-f81dd8fd4f9add75179602ffbcf81b7d.ssl.cf2.rackcdn.com/855187/4/gate/tripleo-ci-centos-8-undercloud-ffu-wallaby/24b5132/logs/undercloud/home/zuul/ffu_undercloud_upgrade.log

[2]. https://logserver.rdoproject.org/openstack-periodic-integration-stable1-cs8/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-8-undercloud-upgrade-ffu-wallaby/0d4ca0f/logs/undercloud/home/zuul/ffu_undercloud_upgrade.log

[chandan kumar (chkumar246)]

https://koji.mbox.centos.org/koji/buildinfo?buildID=22871
```
* Wed Dec 01 2021 Vit Mojzis <email address hidden> - 0.2.6-3
- Make sure each section of the inspect exists before accessing (#2027662)

* Tue Sep 21 2021 Vit Mojzis <email address hidden> - 0.2.6-2
- Require container-selinux shipping policy templates (#2005866)
```
We need to downgrade container-selinux to work with older udica.
It can be easily reproducible in cs8 container.
```
dnf module enable container-tools:3.0
dnf install udica
dnf install container-selinux
```
Traceback
```
[root@d4dd1a0933f0 /]# dnf install container-selinux
Last metadata expiration check: 0:04:21 ago on Mon Sep 26 05:53:03 2022.
Error:
 Problem: problem with installed package udica-0.2.4-1.module_el8.7.0+1217+ea57d1f1.noarch
  - package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.7.0+1217+ea57d1f1.noarch
  - package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.4.0+786+4668b267.noarch
  - package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.5.0+736+58cc1a5a.noarch
  - cannot install the best candidate for the job
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

```
We need to exclude container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch in order to get the job passing.

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/859213

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-quickstart/+/859213
Committed: https://opendev.org/openstack/tripleo-quickstart/commit/61973b67be2a5bf91815aadf7bb99f50a100eed7
Submitter: "Zuul (22348)"
Branch: master

commit 61973b67be2a5bf91815aadf7bb99f50a100eed7
Author: Chandan Kumar (raukadah) <email address hidden>
Date: Mon Sep 26 11:36:10 2022 +0530

    [CS8][Wallaby] Exclude container-selinux-2:2.189.0

    Latest version of udica[1] requires container-selinux.
    In ffu upgrade job, during container-selinux installation,
    It gives following error:
    ```
    package container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1.noarch
    conflicts with udica < 0.2.6-1 provided by udica-0.2.4-1.module_el8.7.0+1217+ea57d1f1.noarch
    ```
    Excluding latest container-selinux-2:2.189.0 fixes the issue
    as it works with existing udica-0.2.4-1.module_el8.

    [1]. https://koji.mbox.centos.org/koji/buildinfo?buildID=22871

    Related-Bug: #1990810

    Signed-off-by: Chandan Kumar (raukadah) <email address hidden>
    Change-Id: Ied21dbba59dbfe174036d2301ab9543c924c1de5

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/859516

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/tripleo-quickstart/+/859516
Committed: https://opendev.org/openstack/tripleo-quickstart/commit/dc26b849018e3d5f2ecfe625fca7264877fe75ae
Submitter: "Zuul (22348)"
Branch: master

commit dc26b849018e3d5f2ecfe625fca7264877fe75ae
Author: PranaliD <email address hidden>
Date: Wed Sep 28 11:20:43 2022 +0530

    [CS8][Train] Exclude container-selinux-2:2.189.0

    Similar to wallaby[1], latest container-selinux-2:2.189.0 needs
    to be excluded for train as well.

    Related-Bug: #1990810
    [1]: https://review.opendev.org/c/openstack/tripleo-quickstart/+/859213

    Change-Id: I56d3c199b89997238c50638c9813900a26a3dadb

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/880284

[OpenStack Infra (hudson-openstack)]

Change abandoned by "chandan kumar <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/tripleo-quickstart/+/880284
Reason: https://review.opendev.org/c/openstack/tripleo-quickstart/+/879893

[Alan Pevec (apevec)]

This is fixed after move to container-tools:rhel8 with https://review.opendev.org/c/openstack/tripleo-quickstart/+/879893