cert-manager: bump to v1.14.6, helm chart v1.14.6

postgres-operator: bump to v1.12.2, helm chart v1.12.2

postgres-operator-ui: bump to v1.12.2, helm chart v1.12.2

inventory/ghp/sample/group_vars/all/versions.yaml

@@ -1,5 +1,5 @@
 # MetalLB balancer
-metallb_version: 0.14.5
+metallb_version: 0.14.6
 
 # NFS provisioners
 nfs_client_provisioner_hdd_version: 4.0.18
@@ -26,8 +26,8 @@ internal_ingress_nginx_version: 4.2.3
 local_ingress_nginx_version: 4.2.3
 
 # PostgreSQL operator
-postgres_operator_version: 1.12.0
-postgres_operator_ui_version: 1.12.0
+postgres_operator_version: 1.12.2
+postgres_operator_ui_version: 1.12.2
 
 # OpenLDAP
 openldap_version: 1.2.7

roles/haproxy/tasks/package.yml

@@ -13,6 +13,13 @@
       - restart haproxy
     when: haproxy_config is defined
   
+  - name: set haproxy_connect_any flag on and keep it persistent across reboots
+    ansible.posix.seboolean:
+      name: haproxy_connect_any
+      state: yes
+      persistent: yes
+    when: ansible_selinux is defined and ansible_selinux != False and ansible_selinux.status == 'enabled'
+
   - name: start haproxy service
     systemd:
       name: haproxy

roles/nginx/tasks/install.yml

@@ -10,3 +10,17 @@
     register: install_nginx_result
     tags:
       - nginx-install
+
+  - name: set httpd_can_network_connect flag on and keep it persistent across reboots
+    ansible.posix.seboolean:
+      name: httpd_can_network_connect
+      state: yes
+      persistent: yes
+    when: ansible_selinux is defined and ansible_selinux != False and ansible_selinux.status == 'enabled'
+
+  - name: set httpd_can_network_relay flag on and keep it persistent across reboots
+    ansible.posix.seboolean:
+      name: httpd_can_network_relay
+      state: yes
+      persistent: yes
+    when: ansible_selinux is defined and ansible_selinux != False and ansible_selinux.status == 'enabled'