openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/overcloud-secure
History
Bob Fournier a5183a03e1 Remove note in README regarding security hardened images 
Support for security hardened images was delivered in Queens, not as
TechPreview.  Removing the section of README that indicates it is
TechPreview.

Change-Id: I579b1fdedcd23f8d004bb9ca6c8fedd29c33ac7c
(cherry picked from commit 37b74a670a)
 		2019-05-31 17:12:11 +00:00
..
README.rst Remove note in README regarding security hardened images 2019-05-31 17:12:11 +00:00
block-device-default.yaml Increase size for security hardened images 2019-01-04 17:22:11 +00:00
element-deps Add a dependency on block-device-mbr element 2018-04-05 13:40:07 +02:00
package-installs.yaml Add overcloud-secure element 2017-05-30 18:18:41 +02:00

README.rst

overcloud-secure

overcloud-secure is an element to add extra security hardening features to the tripleo images: partition creation and unsafe package uninstall.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.