The goal of the openstack-ansible-security role is to improve security within openstack-ansible deployments. The role is based on the Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6.
This role can be used with or without the openstack-ansible role. It requires Ansible 1.8.3 at a minimum.
All of the variables for this role are in defaults/main.yml.
This role has no dependencies.
Using the role is fairly straightforward:
- hosts: servers
roles:
- openstack-ansible-security
This role can be tested easily on multiple platforms using Vagrant.
The Vagrantfile supports testing on:
- Ubuntu 14.04
- Ubuntu 16.04
- CentOS 7
To test on all platforms:
vagrant destroy --force && vagrant upTo test on Ubuntu 14.04 only:
vagrant destroy ubuntu1404 --force && vagrant up ubuntu1404To test on Ubuntu 16.04 only:
vagrant destroy ubuntu1604 --force && vagrant up ubuntu1604To test on CentOS 7 only:
vagrant destroy centos7 --force && vagrant up centos7Apache 2.0
For more information, join #openstack-ansible on Freenode.