Project

General

Profile

Support #388

Updated by Charles N 1 day ago

Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance). 

 Evaluate and deploy a patch management solution to keep systems patched and be able to prove compliance. 

 ## Scope 
 - [ ] Decision gate: evaluate options 
   - **Uyuni** (full enchilada): https://www.uyuni-project.org/ 
   - **Kit-bash:** unattended-upgrades + Foreman/Katello + ansible 
     - https://wiki.debian.org/UnattendedUpgrades 
     - https://docs.theforeman.org/release/3.15/ 
     - https://github.com/Katello 
     - https://theforeman.org/plugins/katello/ 
 - [ ] Deploy chosen solution 
 - [ ] Configure patch schedules + compliance reporting 
 - [ ] Validate in sectestbed-* before prod 

 ## Context 
 - Roles executed via tsys-awx (AWX). 

 ## Dependencies 
 Depends on #379 #1 (test lab), #387 #9 (OIDC auth).

Back