3f300f6d58
* Alphabetized defaults/main.yml and combined some sections that go together * Minor documentation edits * Removed WIP mentions in docs Depends-On: I98954dcb26ff28c94f97e0d4a85a8bee7bc27b30 Change-Id: I8b1a905b2aa81ef4f95fb72a82858ef3ed876ee7
42 lines
1.8 KiB
ReStructuredText
42 lines
1.8 KiB
ReStructuredText
Security hardening for openstack-ansible
|
|
========================================
|
|
|
|
The openstack-ansible-security role provides security hardening for `OpenStack`_
|
|
environments deployed with `openstack-ansible`_. The role has multiple goals:
|
|
|
|
* Provide additional security in a highly configurable, integrated way without
|
|
disrupting a production OpenStack environment.
|
|
* Make it easier for organizations to meet the requirements of compliance
|
|
programs, such as `Payment Card Industry Data Security Standard (PCI-DSS)`_.
|
|
* Document all changes to allow deployers to make educated decisions on which
|
|
security configuration changes to apply.
|
|
|
|
At this time, the role follows the requirements of the US Government's
|
|
`Security Technical Implementation Guide (STIG)`_ for Red Hat Enterprise Linux 6.
|
|
Since openstack-ansible only supports Ubuntu 14.04 (as of late 2015), many of
|
|
the configuration changes in the STIG will be adapted to fit an Ubuntu 14.04
|
|
system. Those adaptations are noted within the playbook tasks themselves and
|
|
also within this documentation.
|
|
|
|
The easiest method for reviewing the STIG configurations and the relevant
|
|
metadata is through the `STIG Viewer`_ service provided by `UCF`_.
|
|
|
|
.. _OpenStack: http://www.openstack.org/
|
|
.. _openstack-ansible: http://docs.openstack.org/developer/openstack-ansible/
|
|
.. _Payment Card Industry Data Security Standard (PCI-DSS): https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard
|
|
.. _Security Technical Implementation Guide (STIG): https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide
|
|
.. _STIG Viewer: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/
|
|
.. _UCF: http://www.unifiedcompliance.com/
|
|
|
|
Table of Contents
|
|
=================
|
|
|
|
.. toctree::
|
|
:maxdepth: 2
|
|
|
|
benefits.rst
|
|
configuration.rst
|
|
getting-started.rst
|
|
writing-docs.rst
|
|
controls.rst
|