diff --git a/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux
new file mode 100644
index 000000000..97bfb5bb0
--- /dev/null
+++ b/etc/kayobe/environments/ci-aio/inventory/group_vars/controllers/selinux
@@ -0,0 +1,4 @@
+---
+# Configure SELinux to be disabled in all cases. This is a short term fix, we
+# want RL9 hosts to be be permissive but our host images need to be rebuilt.
+selinux_state: "disabled"