diff --git a/cloud/setup.yml b/cloud/setup.yml index 39939a48..6b698d64 100644 --- a/cloud/setup.yml +++ b/cloud/setup.yml @@ -174,9 +174,9 @@ controller_templates: - question_name: Specify target instance type type: text variable: instance_type + default: t3a.medium required: true - - name: Cloud / AWS / Restore EC2 from Snapshot job_type: run organization: Default diff --git a/collections/ansible_collections/demo/cloud/roles/aws/tasks/resize_ec2.yml b/collections/ansible_collections/demo/cloud/roles/aws/tasks/resize_ec2.yml index 40a7b145..af1b9bd3 100644 --- a/collections/ansible_collections/demo/cloud/roles/aws/tasks/resize_ec2.yml +++ b/collections/ansible_collections/demo/cloud/roles/aws/tasks/resize_ec2.yml @@ -6,7 +6,7 @@ block: - name: AWS | RESIZE EC2 | assert required vars ansible.builtin.assert: - that: + that: - instance_id is defined - aws_region is defined fail_msg: "instance_id, aws_region is required for resize operations" diff --git a/linux/disa_stig.yml b/linux/disa_stig.yml new file mode 100644 index 00000000..c6d7d419 --- /dev/null +++ b/linux/disa_stig.yml @@ -0,0 +1,15 @@ +--- +- name: Apply compliance profile + hosts: "{{ _hosts | default(omit) }}" + become: true + vars: + compliance_profile: undef + + tasks: + - name: Check os type + ansible.builtin.assert: + that: "ansible_os_family == 'RedHat'" + + - name: Run Compliance Profile + ansible.builtin.include_role: + name: "demo.compliance.rhel{{ ansible_distribution_major_version }}STIG" diff --git a/linux/setup.yml b/linux/setup.yml index 04258041..6f09a187 100644 --- a/linux/setup.yml +++ b/linux/setup.yml @@ -356,6 +356,28 @@ controller_templates: variable: _hosts required: true + - name: "LINUX / DISA STIG" + job_type: run + inventory: "Demo Inventory" + project: "Ansible Product Demos" + playbook: "linux/disa_stig.yml" + notification_templates_started: Telemetry + notification_templates_success: Telemetry + notification_templates_error: Telemetry + credentials: + - "Demo Credential" + extra_vars: + sudo_remove_nopasswd: false + survey_enabled: true + survey: + name: '' + description: '' + spec: + - question_name: Server Name or Pattern + type: text + variable: _hosts + required: true + - name: "LINUX / Multi-profile Compliance" job_type: run inventory: "Demo Inventory"