2026-05-06 06:36:53 +00:00
|
|
|
# infra-run/ansible/playbooks
|
|
|
|
|
|
2026-05-06 09:25:43 +00:00
|
|
|
This directory contains executable Ansible playbooks that coordinate roles, inventories, and operational hardening tasks.
|
2026-05-06 06:36:53 +00:00
|
|
|
|
|
|
|
|
## Diagram
|
|
|
|
|
|
|
|
|
|
```mermaid
|
|
|
|
|
flowchart TD
|
|
|
|
|
A["playbooks"] --> B["Provisioning flows"]
|
|
|
|
|
A --> C["Hardening flows"]
|
|
|
|
|
A --> D["Patch workflows"]
|
|
|
|
|
A --> E["Decommission workflows"]
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Notes
|
|
|
|
|
|
2026-05-08 21:18:22 +00:00
|
|
|
- `cis-rhel9-hardening.yml` applies the RHEL 9 selected baseline hardening role to Linux inventory targets.
|
|
|
|
|
- `cis-debian-ubuntu-hardening.yml` applies the Debian 13 / Ubuntu 26.04 selected baseline hardening role to Linux inventory targets.
|
|
|
|
|
- `cis-aix7-hardening.yml` applies the IBM AIX 7 selected baseline hardening role to AIX inventory targets.
|
2026-05-06 09:25:43 +00:00
|
|
|
- Use the sanitized inventory under `../inventory/` as a starting point and override defaults per environment.
|
