Skip to content

CE-2893: Allow both inventories and extra variables for IOC deployment

Simon Rose requested to merge simonrose/ics-ans-ioc:inventory_xtra_vars into master

The intent of this MR is to change the behaviour of ics-ans-ioc. The expected behaviour should be:

  • Hosts should have an inventory of iocs that describe the IOCs on the host
  • If you run the playbook against the host, it will deploy those and remove an extra ones
  • If you pass either iocs_to_deploy or iocs_to_undeploy (a list of IOC names in either case) as extra variables, then it will attempt to deploy or undeploy those IOCs from the inventory that match those names

Naturally this depends on ics-ans-role-ioc!40 (merged) being merged in; in that case, the first commit in this MR needs to be removed; it only exists for testing and evaluation.

Merge request reports