From 751c0889380ee85d8cb1436e1c5a8c5ac3568dce Mon Sep 17 00:00:00 2001 From: Yifei Xue Date: Wed, 20 Dec 2017 15:03:35 +0800 Subject: Bug fix for chrony configuration JIRA: - Set "security_ntp_servers" to use only one server; Correct the path of chrony key for centos deployment. Change-Id: I3050018fe07c51912e0b52a1c5c7ce2dd4d3f6ce Signed-off-by: Yifei Xue --- deploy/adapters/ansible/roles/config-osa/tasks/main.yml | 7 +++++++ .../ansible/roles/config-osa/templates/user_variables.yml.j2 | 3 +++ 2 files changed, 10 insertions(+) (limited to 'deploy/adapters/ansible/roles/config-osa') diff --git a/deploy/adapters/ansible/roles/config-osa/tasks/main.yml b/deploy/adapters/ansible/roles/config-osa/tasks/main.yml index 75e89b06..49e4e26d 100755 --- a/deploy/adapters/ansible/roles/config-osa/tasks/main.yml +++ b/deploy/adapters/ansible/roles/config-osa/tasks/main.yml @@ -88,6 +88,13 @@ delay: 10 when: hostvars[hostvars[inventory_hostname]['groups']['controller'][0]]['local_mirror'] == 'CentOS' +- name: update the directory of chrony key + lineinfile: + dest: /etc/ansible/roles/ansible-hardening/templates/chrony.conf.j2 + regexp: '^keyfile' + line: 'keyfile /etc/chrony.keys' + when: hostvars[hostvars[inventory_hostname]['groups']['controller'][0]]['local_mirror'] == 'CentOS' + - name: add mariadb local repository blockinfile: dest: /etc/openstack_deploy/user_variables.yml diff --git a/deploy/adapters/ansible/roles/config-osa/templates/user_variables.yml.j2 b/deploy/adapters/ansible/roles/config-osa/templates/user_variables.yml.j2 index 88a3233b..5fa999a5 100644 --- a/deploy/adapters/ansible/roles/config-osa/templates/user_variables.yml.j2 +++ b/deploy/adapters/ansible/roles/config-osa/templates/user_variables.yml.j2 @@ -63,3 +63,6 @@ neutron_provider_networks: {% endif %} security_sshd_permit_root_login: yes + +security_ntp_servers: + - 45.79.111.114 -- cgit 1.2.3-korg