diff --git a/examples/playbook.yml b/examples/playbook.yml new file mode 100644 index 00000000..0a8c6d0d --- /dev/null +++ b/examples/playbook.yml @@ -0,0 +1,17 @@ +--- +- name: Gather security hardening facts + hosts: "{{ security_host_group|default('hosts') }}" + gather_facts: True + tags: + - always + +- name: Apply security hardening configurations + hosts: "{{ security_host_group|default('hosts') }}" + gather_facts: false + user: root + roles: + - role: "ansible-hardening" + when: apply_security_hardening | default(True) | bool + environment: "{{ deployment_environment_variables | default({}) }}" + tags: + - security diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml index e4b83578..d5164665 100644 --- a/zuul.d/project.yaml +++ b/zuul.d/project.yaml @@ -14,7 +14,8 @@ - project: templates: - - openstack-ansible-role-jobs + - openstack-ansible-linters-jobs + - openstack-ansible-deploy-hosts_metal-jobs - check-requirements - publish-openstack-docs-pti - release-notes-jobs-python3