From ee9c789b23c9c203b7c942f87998c0305a33ea17 Mon Sep 17 00:00:00 2001 From: Yolanda Robla Date: Mon, 6 Mar 2017 18:09:19 +0100 Subject: [PATCH] Enable keystone cadf notifications It will allow to configure keystone event notifications using CADF, as documented on: https://docs.openstack.org/developer/keystone/event_notifications.html CADF events provide auditing capabilities for compliance with security. Change-Id: Id16b264c295b9e3adbf960366ff8328ba8dcd485 --- capabilities-map.yaml | 5 +++++ environments/cadf.yaml | 2 ++ 2 files changed, 7 insertions(+) create mode 100644 environments/cadf.yaml diff --git a/capabilities-map.yaml b/capabilities-map.yaml index 26ed7f2ad2..66dc1d1d03 100644 --- a/capabilities-map.yaml +++ b/capabilities-map.yaml @@ -582,3 +582,8 @@ topics: description: requires: - overcloud-resource-registry-puppet.yaml + - title: Keystone CADF auditing + description: Enable CADF notifications in Keystone for auditing + environments: + - file: environments/cadf.yaml + title: Keystone CADF auditing diff --git a/environments/cadf.yaml b/environments/cadf.yaml new file mode 100644 index 0000000000..af5c7fdffb --- /dev/null +++ b/environments/cadf.yaml @@ -0,0 +1,2 @@ +parameter_defaults: + KeystoneNotificationFormat: cadf