now we will disable SELinux manually, do a rollout restart and then wait for...

now we will disable SELinux manually, do a rollout restart and then wait for the deamonset, not the pods

roles/rke2/tasks/fix_selinux.yml

@@ -3,9 +3,13 @@
 #    timeout: 30
 #  delegate_to: localhost
 
-#- name: kill the openstack ccm pods to make sure they boot in permissive mode
-#  shell: "/var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml rollout restart -n kube-system ds openstack-cloud-controller-manager "
-#  register: openstack_ccm_ready
+- name: make sure we re in permissive mode
+  shell: "setenforce 0 "
+  register: selinux_off
+
+- name: kill the openstack ccm pods to make sure they boot in permissive mode
+  shell: "/var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml rollout restart -n kube-system ds openstack-cloud-controller-manager "
+  register: openstack_ccm_ready
 #  until: openstack_ccm_ready.stdout
 #  retries: 2
 #  delay: 30
@@ -33,7 +37,7 @@
 #     - kube-scheduler
 
 - name: Wait for openstack-cloud-controller deamon set to be ready
-  shell: "/var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml wait --namespace=kube-system --for=condition=Ready pods --selector app=openstack-cloud-controller-manager --timeout=360s"
+  shell: "/var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml wait --namespace=kube-system --for=condition=Ready ds --selector app=openstack-cloud-controller-manager --timeout=360s"
   register: openstack_ccm_ready
   #until: openstack_ccm_ready.stdout
   #retries: 2