Pulp

Which Pulp API are you using when these AVC denials are produced?

This occurs when pulp_ansible is processing an uploaded collection [1] when galaxy_importer is configured to run ansible_test via Podman.

[1] https://github.com/pulp/pulp_ansible/blob/master/pulp_ansible/app/tasks/collections.py#L150

I'm not sure Pulp can readily solve this problem because the calls don't occur from code Pulp maintains. Since galaxy_importer is having changes occur that require additional selinux updates, can you all reach out to the SELinux team to extend the policy https://github.com/pulp/pulpcore-selinux to handle those calls also? I'll message some sharing info about the process of how to do that.