zuul-jobs/playbooks/enable-fips/pre.yaml
Douglas Viroel 9107f3ee7d Add FIPS enable multinode job definition
This patch adds a new multinode job definition that enables
FIPS mode prior to multinode configuration.
In order to enable FIPS mode, the OS boot procedure need to be
changed to enable the appropriate kernel flag. This modification
has effect only after system reboot.
The default behavior of this job is to always enable FIPS mode.

Change-Id: I6f1365837d9ed2ba82c391a20f9094c9ef0e6c4e
Signed-off-by: Douglas Viroel <dviroel@redhat.com>
2021-10-20 11:20:52 -03:00

10 lines
332 B
YAML

- name: Enable FIPS mode
hosts: all
tasks:
# Enabling FIPS mode requires changes in boot procedure to provide the
# appropriate kernel flag. The change has effect only after system reboot.
- name: Enable FIPS mode and reboot node
include_role:
name: enable-fips
when: enable_fips | default(true)