Adding new 2.5 docs; updating 2.6 docs

2026-09-26 13:08:11 +00:00 · 2022-09-06 11:25:43 -04:00
parent 01499ab42e
commit a2c2284a7d
46 changed files with 855 additions and 794 deletions
@@ -1 +1,66 @@
-<!-- PLACEHOLDER -->
+---
+title: About rancher-selinux
+---
+
+To allow Rancher to work with SELinux, some functionality has to be manually enabled for the SELinux nodes. To help with that, Rancher provides a SELinux RPM. 
+
+The `rancher-selinux` RPM only contains policies for the [rancher-logging application.](https://github.com/rancher/charts/tree/dev-v2.5/charts/rancher-logging)
+
+The `rancher-selinux` GitHub repository is [here.](https://github.com/rancher/rancher-selinux)
+
+# Installing the rancher-selinux RPM
+
+:::note Requirement:
+
+The rancher-selinux RPM was tested with CentOS 7 and 8.
+
+:::
+
+### 1. Set up the yum repo
+
+Set up the yum repo to install `rancher-selinux` directly on all hosts in the cluster.
+
+In order to use the RPM repository, on a CentOS 7 or RHEL 7 system, run the following bash snippet:
+
+```
+# cat << EOF > /etc/yum.repos.d/rancher.repo 
+[rancher] 
+name=Rancher 
+baseurl=https://rpm.rancher.io/rancher/production/centos/7/noarch
+enabled=1 
+gpgcheck=1 
+gpgkey=https://rpm.rancher.io/public.key 
+EOF
+```
+
+In order to use the RPM repository, on a CentOS 8 or RHEL 8 system, run the following bash snippet:
+
+```
+# cat << EOF > /etc/yum.repos.d/rancher.repo 
+[rancher] 
+name=Rancher 
+baseurl=https://rpm.rancher.io/rancher/production/centos/8/noarch
+enabled=1 
+gpgcheck=1 
+gpgkey=https://rpm.rancher.io/public.key 
+EOF
+```
+### 2. Installing the RPM
+
+Install the RPM:
+
+```
+yum -y install rancher-selinux
+```
+
+# Configuring the Logging Application to Work with SELinux
+
+:::note Requirement:
+
+Logging v2 was tested with SELinux on RHEL/CentOS 7 and 8.
+
+:::
+
+Applications do not automatically work once the `rancher-selinux` RPM is installed on the host. They need to be configured to run in an allowed SELinux container domain provided by the RPM. 
+
+To configure the `rancher-logging` chart to be SELinux aware, change `global.seLinux.enabled` to true in the `values.yaml` when installing the chart.
@@ -1 +1,9 @@
-<!-- PLACEHOLDER -->
+---
+title: About rke2-selinux
+---
+
+`rke2-selinux` provides policies for RKE2. It is installed automatically when the RKE2 installer script detects that it is running on an RPM-based distro.
+
+The `rke2-selinux` GitHub repository is [here.](https://github.com/rancher/rke2-selinux)
+
+For more information about installing RKE2 on SELinux-enabled hosts, see the [RKE2 documentation.](https://docs.rke2.io/install/methods/#rpm)