diff --git a/README.md b/README.md index 09132dc6..1288192e 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,14 @@ openstack-ansible-security ========================== +**DEPRECATION NOTICE:** The openstack-ansible-security role is deprecated and +will be retired soon. Consumers of this role should use the +[ansible-hardening](https://github.com/openstack/ansible-hardening) role +instead. + +Overview +-------- + The openstack-ansible security role applies security hardening configurations from the [Security Technical Implementation Guide(STIG)](http://iase.disa.mil/stigs/Pages/index.aspx) to systems running Ubuntu 14.04, Ubuntu 16.04, CentOS 7, and Red Hat diff --git a/README.rst b/README.rst index 0554a8d2..bd12adfc 100644 --- a/README.rst +++ b/README.rst @@ -10,6 +10,11 @@ Team and repository tags Security hardening for OpenStack-Ansible ---------------------------------------- +**DEPRECATION NOTICE:** The openstack-ansible-security role is deprecated and +will be retired soon. Consumers of this role should use the +`ansible-hardening `_ role +instead. + Documentation for openstack-ansible-security is available in the `official OpenStack documentation site`_. diff --git a/doc/source/index.rst b/doc/source/index.rst index 97df3dfe..2127b549 100644 --- a/doc/source/index.rst +++ b/doc/source/index.rst @@ -2,6 +2,13 @@ Automated security hardening for Linux hosts ============================================ +.. warning:: + + The openstack-ansible-security role is deprecated and will be retired soon. + Consumers of this role should begin consuming the + `ansible-hardening `_ + role to receive the latest updates. + The openstack-ansible-security Ansible role uses industry-standard security hardening guides to secure Linux hosts. Although the role is designed to work well in OpenStack environments that are deployed with OpenStack-Ansible, it can diff --git a/tasks/main.yml b/tasks/main.yml index 6129de01..83e812f0 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -13,6 +13,41 @@ # See the License for the specific language governing permissions and # limitations under the License. + - name: Print warning about role deprecation + debug: + msg: | + ********************************************************************* + ____ _ _ + | _ \ ___ _ __ _ __ ___ ___ __ _| |_ ___ __| | + | | | |/ _ \ '_ \| '__/ _ \/ __/ _` | __/ _ \/ _` | + | |_| | __/ |_) | | | __/ (_| (_| | || __/ (_| | + |____/ \___| .__/|_| \___|\___\__,_|\__\___|\__,_| + |_| + ********************************************************************* + + The openstack-ansible-security role is deprecated and will be retired + soon. Please consume the ansible-hardening role to receive the latest + updates: + + https://github.com/openstack/ansible-hardening + + ********************************************************************* + ____ _ _ + | _ \ ___ _ __ _ __ ___ ___ __ _| |_ ___ __| | + | | | |/ _ \ '_ \| '__/ _ \/ __/ _` | __/ _ \/ _` | + | |_| | __/ |_) | | | __/ (_| (_| | || __/ (_| | + |____/ \___| .__/|_| \___|\___\__,_|\__\___|\__,_| + |_| + ********************************************************************* + tags: + - always + + - name: Pause the playbook run to highlight the deprecation warning + pause: + seconds: 30 + tags: + - always + - name: Gather variables for each operating system include_vars: "{{ item }}" with_first_found: