openstack
/
ansible-hardening
Code Issues Proposed changes

Merge "Chrony: make ntp server options configurable"

This commit is contained in:
Zuul 2019-01-10 19:15:17 +00:00 committed by Gerrit Code Review
parent f381cc02af cca2800ea4
commit c2105e6f5a
3 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -270,6 +270,8 @@ security_ntp_servers:
- 1.pool.ntp.org
- 2.pool.ntp.org
- 3.pool.ntp.org
# NTP server options.
security_ntp_server_options: offline maxpoll 10 minpoll 8
# Chrony limits access to clients that are on certain subnets. Adjust the
# following subnets here to limit client access to chrony servers.
security_allowed_ntp_subnets:

4
releasenotes/notes/chrony-ntp-server-options-f8f87225a5282e1a.yaml Normal file
View File

@ -0,0 +1,4 @@
---
features:
- It is now possible to modify the NTP server options in chrony using
``security_ntp_server_options``.

2
templates/chrony.conf.j2
View File

@ -20,7 +20,7 @@
# better to use IP numbers than host names.
{% for ntp_server in security_ntp_servers %}
server {{ ntp_server }} offline maxpoll 10 minpoll 8
server {{ ntp_server }} {{ security_ntp_server_options }}
{% endfor %}
# Look here for the admin password needed for chronyc. The initial