Ansible role for security hardening
Go to file
2016-07-27 18:20:53 +00:00
defaults Merge "Implemented: V-38524." 2016-06-07 21:04:21 +00:00
doc Ensure that doc linting is included in the linters test 2016-07-25 10:45:11 -05:00
files Add ability to enable unattended upgrades 2016-04-15 11:58:29 +01:00
handlers Restart auditd after running augenrules 2016-06-09 15:14:42 -05:00
meta Add CentOS 7 and Ubuntu 16.04 support 2016-05-13 14:57:28 -05:00
releasenotes Update sphinx configuration 2016-07-12 19:03:14 +01:00
tasks Merge "Add idempotency check" 2016-07-27 13:54:24 +00:00
templates Add audit rules to support ppc64le architecture. 2016-07-25 04:23:01 -05:00
tests Add check/audit to gate testing 2016-06-07 13:22:12 +00:00
vars Fix chrony daemon name for rh derivatives 2016-07-19 15:45:48 +01:00
.gitignore Add support for Xenial and CentOS 7 to the Vagrantfile 2016-06-14 16:18:22 -04:00
.gitreview Added .gitreview 2015-10-05 17:37:21 +00:00
LICENSE Initial import of openstack-ansible-security role 2015-10-07 07:27:39 -05:00
other-requirements.txt Add CentOS 7 and Ubuntu 16.04 support 2016-05-13 14:57:28 -05:00
README.md Add support for Xenial and CentOS 7 to the Vagrantfile 2016-06-14 16:18:22 -04:00
README.rst Add a note to the README file where to report bugs 2016-05-27 17:06:40 +02:00
run_tests.sh Docs: Add developer guide for security role 2016-06-08 13:07:06 -05:00
setup.cfg Initial import of openstack-ansible-security role 2015-10-07 07:27:39 -05:00
setup.py Updated from global requirements 2016-07-15 11:26:50 +00:00
test-requirements.txt Updated from global requirements 2016-07-21 13:42:33 +00:00
tox.ini Merge "Ensure that doc linting is included in the linters test" 2016-07-27 18:20:53 +00:00
Vagrantfile Add support for Xenial and CentOS 7 to the Vagrantfile 2016-06-14 16:18:22 -04:00

openstack-ansible-security

The goal of the openstack-ansible-security role is to improve security within openstack-ansible deployments. The role is based on the Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6.

Requirements

This role can be used with or without the openstack-ansible role. It requires Ansible 1.8.3 at a minimum.

Role Variables

All of the variables for this role are in defaults/main.yml.

Dependencies

This role has no dependencies.

Example Playbook

Using the role is fairly straightforward:

- hosts: servers
  roles:
     - openstack-ansible-security

Running with Vagrant

This role can be tested easily on multiple platforms using Vagrant.

The Vagrantfile supports testing on:

  • Ubuntu 14.04
  • Ubuntu 16.04
  • CentOS 7

To test on all platforms:

vagrant destroy --force && vagrant up

To test on Ubuntu 14.04 only:

vagrant destroy ubuntu1404 --force && vagrant up ubuntu1404

To test on Ubuntu 16.04 only:

vagrant destroy ubuntu1604 --force && vagrant up ubuntu1604

To test on CentOS 7 only:

vagrant destroy centos7 --force && vagrant up centos7

License

Apache 2.0

Author Information

For more information, join #openstack-ansible on Freenode.