Switch hardening to integrated tests
We aim to decrease usage of the tests repo as much as we can, so we are switching roles to the tests completed by integrated repo. Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/792639 Change-Id: Ice89ada6e009d3aaaff5fa261c7b9cf23216f159
This commit is contained in:
17
examples/playbook.yml
Normal file
17
examples/playbook.yml
Normal file
@@ -0,0 +1,17 @@
|
||||
---
|
||||
- name: Gather security hardening facts
|
||||
hosts: "{{ security_host_group|default('hosts') }}"
|
||||
gather_facts: True
|
||||
tags:
|
||||
- always
|
||||
|
||||
- name: Apply security hardening configurations
|
||||
hosts: "{{ security_host_group|default('hosts') }}"
|
||||
gather_facts: false
|
||||
user: root
|
||||
roles:
|
||||
- role: "ansible-hardening"
|
||||
when: apply_security_hardening | default(True) | bool
|
||||
environment: "{{ deployment_environment_variables | default({}) }}"
|
||||
tags:
|
||||
- security
|
@@ -14,7 +14,8 @@
|
||||
|
||||
- project:
|
||||
templates:
|
||||
- openstack-ansible-role-jobs
|
||||
- openstack-ansible-linters-jobs
|
||||
- openstack-ansible-deploy-hosts_metal-jobs
|
||||
- check-requirements
|
||||
- publish-openstack-docs-pti
|
||||
- release-notes-jobs-python3
|
||||
|
Reference in New Issue
Block a user