Security Automation with Ansible 2

OpenStack-Ansible

OpenStack-Ansible is the official project for deploying and configuring OpenStack using Ansible playbooks.

Start here for OpenStack-Ansible: https://github.com/openstack/openstack-ansible.

Not only does this project use Ansible playbooks extensively, but their security documentation is also worth reading and emulating. The best part is that all of the security configuration is declarative security codified in Ansible playbooks.

Documentation on this project is available at https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/app-security.html.