Proxy PuppetDB Dashboard does not work with selinux in enforcing mode about puppetdb_foreman HOT 2 CLOSED

This can be fixed by setting the passenger_can_connect_all selinux boolean:
http://projects.theforeman.org/issues/12991

I manage my puppet master / foreman instance with puppet and have added this to fix it:

# puppet/selinux.pp
# Manage selinux setting needed by puppet master
#   connect to puppetdb and dashboard
#

class profile::puppet::selinux {

  # Allow passenger / puppet to connect to puppetdb and puppetdb dashboard
  if str2bool($::selinux) {
    selboolean { 'passenger_can_connect_all':
      persistent => true,
      value      => 'on',
    }
  }
}

Maybe this should go in the doc / README.
There may also be a better way to do this in the OS packages for selinux policy.

from puppetdb_foreman.

For the benefit of anyone who stumbles across this issue whilst trying to get Foreman 2.x to work with PuppetDB and SELinux...

Even though the puppetdb dashboard doesn't exist anymore, to get PuppetDB Nodes to work with SELinux on modern versions of Foreman, use the foreman_rails_can_connect_all selinux boolean instead of passenger_can_connect_all.

from puppetdb_foreman.