Harden the resilience of main system services

[ta/infra-ansible.git] / roles / monitoring / defaults / main.yaml

diff --git a/roles/monitoring/defaults/main.yaml b/roles/monitoring/defaults/main.yaml
index e535511..e6a3677 100644 (file)
--- a/roles/monitoring/defaults/main.yaml
+++ b/roles/monitoring/defaults/main.yaml
@@ -15,3 +15,13 @@
 # limitations under the License.
 
 keepalivedmonitor_port : 64000
+
+hardened_services:
+  - docker
+  - haproxy
+  - kubelet
+  - kubelet_healthcheck
+  - mariadb
+  - nginx
+  - ntpd
+  - redis