13bfa70528
The RHEL 7 STIG content in the security role is ready to be enabled as the default for deployers who consume only the security role itself. However, the new content isn't ready for the integrated repo. This patch ensures that RHEL 6 STIG content is used in the integrated repo even if the security role itself switches to enable RHEL 7 content as the default. Change-Id: I1b7ceb90673e07c7fc5a2c882c84a56aa1d5877a
28 lines
1.2 KiB
YAML
28 lines
1.2 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Ensure that the package state matches the global setting
|
|
lxc_hosts_package_state: "{{ package_state }}"
|
|
openstack_hosts_package_state: "{{ package_state }}"
|
|
security_package_state: "{{ package_state }}"
|
|
|
|
# Disable /etc/hosts management if unbound DNS resolution containers exist
|
|
openstack_host_manage_hosts_file: "{{ groups['unbound_all'] is not defined or groups['unbound_all'] | length < 1 }}"
|
|
|
|
# Use the RHEL 6 STIG content from the security role.
|
|
# NOTE(mhayden): Remove this variable when the RHEL 7 STIG content becomes the
|
|
# default and tests well with the integrated repository.
|
|
stig_version: rhel6
|