From 788418634dab522dff28a0bdc2395c0276e6fc69 Mon Sep 17 00:00:00 2001
From: Antony Messerli <amesserl@rackspace.com>
Date: Mon, 5 Feb 2018 16:50:07 -0600
Subject: [PATCH] Ability to skip security hardening tags in leap

Add the ability to skip certain hardening tags during the leap
process if required.

Change-Id: If30c27d370e0bdf18bf71a4df895e89a40efbca7
---
 leap-upgrades/re-deploy.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/leap-upgrades/re-deploy.sh b/leap-upgrades/re-deploy.sh
index 73974f0a..31aba3d4 100755
--- a/leap-upgrades/re-deploy.sh
+++ b/leap-upgrades/re-deploy.sh
@@ -53,7 +53,11 @@ fi
 RUN_TASKS+=("openstack-hosts-setup.yml -e redeploy_rerun=true")
 
 # Run the security-hardening playbook in redeployment
-RUN_TASKS+=("security-hardening.yml")
+if [[ -n "${SKIP_HARDENING_TAGS}" ]]; then
+  RUN_TASKS+=("security-hardening.yml --skip-tags=${SKIP_HARDENING_TAGS}")
+else
+  RUN_TASKS+=("security-hardening.yml")
+fi
 
 # Ensure the same pip everywhere, even if requirement met or above
 RUN_TASKS+=("${UPGRADE_UTILS}/pip-unify.yml -e release_version=\"${NEWTON_RELEASE}\"")