3f300f6d58
* Alphabetized defaults/main.yml and combined some sections that go together * Minor documentation edits * Removed WIP mentions in docs Depends-On: I98954dcb26ff28c94f97e0d4a85a8bee7bc27b30 Change-Id: I8b1a905b2aa81ef4f95fb72a82858ef3ed876ee7
1.8 KiB
Security hardening for openstack-ansible
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with openstack-ansible. The role has multiple goals:
- Provide additional security in a highly configurable, integrated way without disrupting a production OpenStack environment.
- Make it easier for organizations to meet the requirements of compliance programs, such as Payment Card Industry Data Security Standard (PCI-DSS).
- Document all changes to allow deployers to make educated decisions on which security configuration changes to apply.
At this time, the role follows the requirements of the US Government's Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6. Since openstack-ansible only supports Ubuntu 14.04 (as of late 2015), many of the configuration changes in the STIG will be adapted to fit an Ubuntu 14.04 system. Those adaptations are noted within the playbook tasks themselves and also within this documentation.
The easiest method for reviewing the STIG configurations and the relevant metadata is through the STIG Viewer service provided by UCF.
Table of Contents
benefits.rst configuration.rst getting-started.rst writing-docs.rst controls.rst