fix for rke2 service types unable to read certs (#16)

Addresses rancher/rke2#965
rancher · May 10, 2021 · b2fe786 · b2fe786
1 parent 4d77c34
commit b2fe786
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/policy/centos7/rke2.if b/policy/centos7/rke2.if
@@ -47,4 +47,6 @@ template(`rke2_service_domain_template',`
     corenet_udp_bind_all_ports($1_t)
     corenet_tcp_bind_all_ports($1_t)
     corenet_tcp_connect_all_ports($1_t)
+
+    miscfiles_read_all_certs($1_t)
 ')
diff --git a/policy/centos8/rke2.if b/policy/centos8/rke2.if
@@ -46,4 +46,6 @@ template(`rke2_service_domain_template',`
     corenet_udp_bind_all_ports($1_t)
     corenet_tcp_bind_all_ports($1_t)
     corenet_tcp_connect_all_ports($1_t)
+
+    miscfiles_read_all_certs($1_t)
 ')