openstack/openstack-ansible
Code Issues Proposed changes

Ensure RHEL 6 STIG content is used

Browse Source 
The RHEL 7 STIG content in the security role is ready to be enabled
as the default for deployers who consume only the security role itself.
However, the new content isn't ready for the integrated repo.

This patch ensures that RHEL 6 STIG content is used in the integrated
repo even if the security role itself switches to enable RHEL 7 content
as the default.

Change-Id: I1b7ceb90673e07c7fc5a2c882c84a56aa1d5877a
This commit is contained in:
Major Hayden
2017-01-09 09:44:34 -06:00
parent e863f6b392
commit 13bfa70528
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
playbooks/inventory/group_vars/hosts.yml
View File

@@ -18,5 +18,10 @@ lxc_hosts_package_state: "{{ package_state }}"
openstack_hosts_package_state: "{{ package_state }}"
security_package_state: "{{ package_state }}"
#Disable /etc/hosts management if unbound DNS resolution containers exist
# Disable /etc/hosts management if unbound DNS resolution containers exist
openstack_host_manage_hosts_file: "{{ groups['unbound_all'] is not defined or groups['unbound_all'] | length < 1 }}"
# Use the RHEL 6 STIG content from the security role.
# NOTE(mhayden): Remove this variable when the RHEL 7 STIG content becomes the
# default and tests well with the integrated repository.
stig_version: rhel6