Switch hardening to integrated tests

We aim to decrease usage of the tests repo as much as we can, so we
are switching roles to the tests completed by integrated repo.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/792639
Change-Id: Ice89ada6e009d3aaaff5fa261c7b9cf23216f159
This commit is contained in:
Dmitriy Rabotyagov 2021-05-21 17:28:39 +03:00
parent 9b3ea39df4
commit 6f354a7a4b
2 changed files with 19 additions and 1 deletions

17
examples/playbook.yml Normal file
View File

@ -0,0 +1,17 @@
---
- name: Gather security hardening facts
hosts: "{{ security_host_group|default('hosts') }}"
gather_facts: True
tags:
- always
- name: Apply security hardening configurations
hosts: "{{ security_host_group|default('hosts') }}"
gather_facts: false
user: root
roles:
- role: "ansible-hardening"
when: apply_security_hardening | default(True) | bool
environment: "{{ deployment_environment_variables | default({}) }}"
tags:
- security

View File

@ -14,7 +14,8 @@
- project:
templates:
- openstack-ansible-role-jobs
- openstack-ansible-linters-jobs
- openstack-ansible-deploy-hosts_metal-jobs
- check-requirements
- publish-openstack-docs-pti
- release-notes-jobs-python3