Skip to content

Commit

Permalink
easzlab#1338 update docs, add deprecated to os-harden
Browse files Browse the repository at this point in the history
  • Loading branch information
gjmzj committed Dec 28, 2023
1 parent 29e9f8c commit c1be349
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 1 deletion.
2 changes: 1 addition & 1 deletion docs/setup/01-CA_and_prerequisite.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

本步骤主要完成:

- (optional) role:os-harden,可选系统加固,符合linux安全基线,详见[upstream](https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/os_hardening)
- (deprecated) role:os-harden(未更新上游项目,未验证最新k8s集群安装,不建议启用)可选系统加固,符合linux安全基线,详见[upstream](https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/os_hardening)
- (optional) role:chrony[可选集群节点时间同步](../guide/chrony.md)
- role:deploy,创建CA证书、集群组件访问apiserver所需的各种kubeconfig
- role:prepare,系统基础环境配置、分发CA证书、kubectl客户端安装
Expand Down
1 change: 1 addition & 0 deletions example/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@
INSTALL_SOURCE: "online"

# 可选进行系统安全加固 github.com/dev-sec/ansible-collection-hardening
# (deprecated) 未更新上游项目,未验证最新k8s集群安装,不建议启用
OS_HARDEN: false


Expand Down
2 changes: 2 additions & 0 deletions roles/os-harden/README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# devsec.os_hardening

**deprecated** this role is outdated, not testified with the latest k8s cluster setup

![devsec.os_hardening](https://github.com/dev-sec/ansible-os-hardening/workflows/devsec.os_hardening/badge.svg)

## Looking for the old ansible-os-hardening role?
Expand Down

0 comments on commit c1be349

Please sign in to comment.