Selinux tasks were not included by zabbix_web role,
seems that include had been dropped by accident (?) on pull request #979 (v2.0.0)
Restored include_tasks: selinux.yml to roles/zabbix_web/tasks/RedHat.yml
Refactor zabbix_selinux variable to zabbix_web_selinux as variable names should be prefixed with role name,
also to use similar pattern with zabbix_proxy_selinux and zabbix_server_selinux variables.
Refactor selinux related variable names in zabbix_web role to correlate with selinux boolean names.
Refactor zabbix_apache_can_connect_ldap to selinux_allow_httpd_can_connect_ldap
as it's not apache specific and not correlating with actual selinux boolean name.
Don't set zabbix_can_network boolean in zabbix_web role as it's not relevant (AFAIK).
SUMMARY
Selinux tasks were not included by zabbix_web role, seems that include had been dropped by accident (?) on pull request #979 (v2.0.0)
Restored
include_tasks: selinux.ymlto roles/zabbix_web/tasks/RedHat.ymlRefactor
zabbix_selinuxvariable tozabbix_web_selinuxas variable names should be prefixed with role name, also to use similar pattern withzabbix_proxy_selinuxandzabbix_server_selinuxvariables.Refactor selinux related variable names in zabbix_web role to correlate with selinux boolean names.
Refactor
zabbix_apache_can_connect_ldaptoselinux_allow_httpd_can_connect_ldapas it's not apache specific and not correlating with actual selinux boolean name.Don't set zabbix_can_network boolean in zabbix_web role as it's not relevant (AFAIK).
ISSUE TYPE
COMPONENT NAME
zabbix_web