8a3a83acaa
This patch adds a multi-release documentation index page to match the main OpenStack-Ansible documentation. This should make it easier for deployers to navigate between the documentation available with each release. Change-Id: If93df1c933b6b99091db749a35a00752fae24d59
2.7 KiB
Security hardening for openstack-ansible
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with openstack-ansible. The role has multiple goals:
- Provide additional security in a highly configurable, integrated way without disrupting a production OpenStack environment.
- Make it easier for organizations to meet the requirements of compliance programs, such as Payment Card Industry Data Security Standard (PCI-DSS).
- Document all changes to allow deployers to make educated decisions on which security configuration changes to apply.
At this time, the role follows the requirements of the US Government's Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6.
The easiest method for reviewing the STIG configurations and the relevant metadata is through the STIG Viewer service provided by UCF.
Newton: Development
The openstack-ansible-security role is currently under development for the Newton release. The Newton release will add support Ubuntu 16.04 and CentOS 7 in addition to the existing support for Ubuntu 14.04.
benefits.rst configuration.rst getting-started.rst writing-docs.rst controls.rst
Mitaka: Stable release
The Mitaka release of the openstack-ansible-security role was first released with the 13.0.0 tag on April 1st, 2016. Refer to the release notes for more details on the improvements and fixes.
Liberty: Previous stable release (EOL: 2016-11-17)
Refer to the release notes for more details on the improvements and fixes.