e5622adc43
This commit adds a gather_facts variable in the playbooks, which is defaulted to True. If run_playbooks.sh is used, this commit adds "-e gather_facts=False" to the openstack-ansible cli for the playbook run. Everything should work fine for deployers (because there is no change for them), and for the gate (because fact caching is enabled) It should speed up the gate by avoiding the long "setup" task cost for each host. Instead it does the setup to the appropriate hosts, at the appropriate time. Change-Id: I348a4b7dfe70d56a64899246daf65ea834a75d2a Signed-off-by: Jean-Philippe Evrard <jean-philippe.evrard@rackspace.co.uk>
27 lines
1015 B
YAML
27 lines
1015 B
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# As an additional safeguard, this playbook requires the
|
|
# 'apply_security_hardening' boolean set to True for it to apply security
|
|
# hardening standards to a system.
|
|
|
|
- name: Apply security hardening configurations
|
|
hosts: "{{ host_group|default('hosts') }}"
|
|
gather_facts: "{{ gather_facts | default(True) }}"
|
|
user: root
|
|
roles:
|
|
- { role: "openstack-ansible-security",
|
|
when: apply_security_hardening | bool }
|