mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-27 15:33:06 +00:00
170b91c249
By default, Ansible injects a variable for every fact, prefixed with ansible_. This can result in a large number of variables for each host, which at scale can incur a performance penalty. Ansible provides a configuration option [0] that can be set to False to prevent this injection of facts. In this case, facts should be referenced via ansible_facts.. This change updates all references to Ansible facts from using individual fact variables to using the items in the ansible_facts dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. [0] https://docs.ansible.com/ansible/latest/reference_appendices/config.html#inject-facts-as-vars Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
14 lines
278 B
YAML
14 lines
278 B
YAML
---
|
|
# vars file for RHEL9-CIS
|
|
|
|
min_ansible_version: 2.10.1
|
|
rhel9cis_allowed_crypto_policies:
|
|
- 'DEFAULT'
|
|
- 'FUTURE'
|
|
- 'FIPS'
|
|
|
|
# Used to control warning summary
|
|
warn_control_list: ""
|
|
warn_count: 0
|
|
|
|
gpg_key_package: "{{ ansible_facts.distribution | lower }}-gpg-keys"
|