diff --git a/ansible-role-requirements.yaml b/ansible-role-requirements.yaml
index 7cfb6379..3b92740d 100644
--- a/ansible-role-requirements.yaml
+++ b/ansible-role-requirements.yaml
@@ -167,7 +167,7 @@
   src: "https://git.openstack.org/openstack/openstack-ansible-rsyslog_server"
   scm: git
   version: "master"
-- name: "security"
-  src: "https://git.openstack.org/openstack/openstack-ansible-security"
+- name: "ansible-hardening"
+  src: "https://git.openstack.org/openstack/ansible-hardening"
   scm: git
   version: "master"
diff --git a/common-tasks/test-set-nodepool-vars.yml b/common-tasks/test-set-nodepool-vars.yml
index fbaa5297..f15a185c 100644
--- a/common-tasks/test-set-nodepool-vars.yml
+++ b/common-tasks/test-set-nodepool-vars.yml
@@ -35,7 +35,7 @@
     - ansible_os_family == 'Debian'
 
 # NOTE(mhayden): GPG checking for local package installs is normally disabled
-# by default in CentOS, but the openstack-ansible-security role enables GPG
+# by default in CentOS, but the ansible-hardening role enables GPG
 # checking for local packages. The RDO repository package isn't signed, but the
 # repos it installs have GPG checking enabled.
 - name: Install the RDO release package