summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorYolanda Robla <yroblamo@redhat.com>2017-03-06 18:09:19 +0100
committerYolanda Robla <yroblamo@redhat.com>2017-03-06 18:10:55 +0100
commitee9c789b23c9c203b7c942f87998c0305a33ea17 (patch)
tree66390e2bee5fbf8a5fccb568dac8547ed34baaa5
parent07f686d085b6d934fdd998fedea8268d78c2c50a (diff)
Enable keystone cadf notifications
It will allow to configure keystone event notifications using CADF, as documented on: https://docs.openstack.org/developer/keystone/event_notifications.html CADF events provide auditing capabilities for compliance with security. Change-Id: Id16b264c295b9e3adbf960366ff8328ba8dcd485
-rw-r--r--capabilities-map.yaml5
-rw-r--r--environments/cadf.yaml2
2 files changed, 7 insertions, 0 deletions
diff --git a/capabilities-map.yaml b/capabilities-map.yaml
index 26ed7f2a..66dc1d1d 100644
--- a/capabilities-map.yaml
+++ b/capabilities-map.yaml
@@ -582,3 +582,8 @@ topics:
description:
requires:
- overcloud-resource-registry-puppet.yaml
+ - title: Keystone CADF auditing
+ description: Enable CADF notifications in Keystone for auditing
+ environments:
+ - file: environments/cadf.yaml
+ title: Keystone CADF auditing
diff --git a/environments/cadf.yaml b/environments/cadf.yaml
new file mode 100644
index 00000000..af5c7fdf
--- /dev/null
+++ b/environments/cadf.yaml
@@ -0,0 +1,2 @@
+parameter_defaults:
+ KeystoneNotificationFormat: cadf