rajeeshb / RHTI

Ansible tools and examples

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

  • Table of contents below Intro, for Tools and Docs

RED HAT MANAGEMENT PORTFOLIO

In every environment there is a core set of servers/services that are required to allow your users to interface with the systems they use daily in seamless operation. The Red Hat Management Portfolio can provide you with the tools you need from a User Front End, Provisioning, Orchestration, Automation, and Management for your environment. These systems will allow you to provide that next level of IT service to your end users/customers.

My work is focused on:

  • Ansible Tower
  • Satellite
  • InSights

Red Hat Management

The key to success is always in the planning! The Venn diagram below depicts the primary functions between tools and the overlap between to help you decide where you would like to situate the functions, and assist in integrating the tools within your IT environment(s)

Satellite:

The easiest way to manage your Red Hat infrastructure for efficient and compliant IT operations. Establish trusted content repos and processes that help you build a standards-based, secure Red Hat environment.

Ansible Tower:

Simple, agentless automation platform that can improve your current processes, migrate apps for better optimization, and provide a single language for DevOps practices across your organization. Ansible Tower by Red Hat is a centralized API for your Ansible automation and a graphical user interface for Ansible.

InSights:

A predictive analytic tool with real-time, in-depth analysis of your Red Hat infrastructure, letting you predict and prevent problems before they occur.

Portfolio Overlap

Working in tandem, this is what the optimal Management system would look like from a Red Hat perspective.

E2E Management Portfolio


    While the upstream Ansible community is known for fast-moving innovations, many enterprises
    require a more secure, stable and reliable approach. With Ansible Engine, organizations
    can access the tools and innovations available from the underlying Ansible technology in a
    hardened, enterprise-grade manner. Ansible Engine relies on the massive, global community 
    behind the Ansible project, and adds in the capabilities and assurance from Red Hat that 
    your business requires in order to comfortably adopt organization-wide automation, and 
    at any scale you can bring. 

Community vs. Enterprise

    Both the Ansible project and Ansible Engine are open source technologies. The Ansible project
    is built by the community (ansible.com/community) for the benefit of the community. 
    Ansible Engine is developed by Red Hat with the explicit intent of being used as an 
    enterprise IT platform.

    Automation requires an investment in time, technology, and people. Make the most of your 
    investment with an enterprise automation platform that delivers supportability, agility
    and flexibility.

Ansible Tower

    Solve problems once. Scale automation with control and insight. Collaborate across teams. 
    Manage policy enforcement and governance. Bring the power of automation to your whole 
    organization.

    With Red Hat Ansible Tower you can centralize and control your IT infrastructure with a visual
    dashboard, role-based access control, job scheduling, integrated notifications and graphical 
    inventory management. Easily embed Ansible Tower into existing tools and processes with REST 
    API and CLI.

Ansible and Ansible Tower should be the linchpin in your Enterprise and the foundation for your your journey into automation

Ansible Features:

  • Simple
  • Powerful - hundreds of use cases
  • Agentless
  • Cross platform – Linux, Windows, UNIX, IoT, etc...
  • Human readable - anyone can do it (no coding skills required)
  • Perfect description of application - less time on documentation required
  • Version controlled
  • Dynamic inventories
  • Orchestration that plays well with others – hp sa, puppet, Jenkins, rhnss, etc.
  • The language of DevOps

Ansible Tower Features:

  • Ansible Tower Editions Standard vs Premium
  • Easy to understand and clean dashboard
  • Real-time job status updates
  • Multi-playbook workflows
  • Easy to see who ran what job when
  • Scale capacity with tower clusters
  • Integrated notifications
  • Schedule ansible jobs
  • Manage and track your entire inventory - Static or DYNAMIC INVENTORIES
  • Self-service it... simplified
  • Remote command execution
  • Comprehensive rest API and tower CLI tool
  • Role Based Access Control
  • LDAP, AD, and other authentication integration
  • Made easy config for your logging aggragator

Ways To Interact With Ansible:

AD-Hoc

Playbooks

Roles

Ansible Collections https://www.ansible.com/blog/getting-started-with-ansible-collections

    New content is continuously made available for consumption. Managing content in this manner also becomes easier as modules, plugins, roles, and docs are packaged and tagged with a collection version. Modules can be updated, renamed, improved upon; roles can be updated to reflect changes in module interaction; docs can be regenerated to reflect the edits and all are packaged and tagged together.

    Before collections, it was not uncommon for modules to break or lack timely updates needed to interact with the services they were interfacing with. This often required Ansible users or Ansible Tower administrators to run multiple versions of Ansible in virtual environments in order to consume a patch that addressed a module issue. Ansible Content Collections bring stability and predictability by breaking modules out from the core distribution.
    For automated organizations, this means that certified content is readily available to be applied to use-cases ripe for automation from day one.

         By default ansible collections live in:
              /etc/ansible/collections              
       
         Finding Collections Community:
              https://galaxy.ansible.com/

         Redhat Supported Content:
              https://cloud.redhat.com/ansible/automation-hub

Request a Ansible Tower License

Resources

Simple Scripts for installing Ansible Tower P.O.C on a single node/vm on RHEL7/8:

    NOTE: Ansible Tower is one of the easiest things to install at Red Hat the 
          scripts below are something I made to help a windows person install Ansible Tower 
          on a linux system without thought. The scripts only install on a standalone if you 
          are going to install this in an Enterprise environment you need to 
          look at the architectural recomendations at: 
          https://docs.ansible.com/ansible-tower/latest/html/administration/clustering.html
THE ARCHITECTURE FOR AN ENTERPRISE DEPLOYMENT

E2E Management Portfolio

    DISCLAMER: Also these are "my scripts" and are not supported in any way (use at own risk) 
               Do not use on a currently running production system. No implied warrenty or other.

FREE Ansible Tower Workshops (listed below)


  • Instructor-led (In person or remote) - Contact your Red Hat Technical Account Manager, Account Solutions Architect, or Sales Team.
  • Or in true Red Hat/Opensource fashion, Red Hat provides you the code to set it up for yourself!

Red Hat Workshops - Code for building workshops.

6 hour workshops:

Workshop Presentation Deck Exercises Workshop Type Var
Ansible Red Hat Enterprise Linux Workshop
focused on automating Linux platforms like Red Hat Enterprise Linux
Deck Exercises workshop_type: rhel
Ansible Network Automation Workshop
focused on router and switch platforms like Arista, Cisco, Juniper
Deck Exercises workshop_type: network
Ansible F5 Workshop
focused on automation of F5 BIG-IP
Deck Exercises workshop_type: f5
Ansible Security Automation
focused on automation of security tools like Check Point Firewall, IBM QRadar and the IDS Snort
Deck Exercises workshop_type: security
Ansible Windows Automation Workshop
focused on automation of Microsoft Windows
Deck Exercises workshop_type: windows

90 minute abbreviated versions:

Workshop Presentation Deck Exercises Workshop Type Var
Ansible Red Hat Enterprise Linux Workshop
focused on automating Linux platforms like Red Hat Enterprise Linux
Deck Exercises workshop_type: rhel_90

Lab Provisioner

  • AWS Lab Provisioner - Playbook that spins up instances on AWS for students to perform the exercises provided above.

Self Paced Exercises

  • Vagrant Demo - Self-paced network automation exercises that can be run on your personal laptop

    Red Hat Satellite is a system management solution that enables you to deploy, configure,
    and maintain your systems across physical, virtual, and cloud environments. Satellite 
    provides provisioning, remote management and monitoring of multiple Red Hat Enterprise Linux
    deployments with a single, centralized tool.

    Red Hat Satellite Server synchronizes the content from Red Hat Customer Portal and other 
    sources, and provides functionality including fine-grained life cycle management, user and 
    group role-based access control, integrated subscription management, as well as advanced GUI, 
    CLI, or API access.

    Red Hat Satellite Capsule Server mirrors content from Red Hat Satellite Server to facilitate 
    content federation across various geographical locations. Host systems can pull content and
    configuration from the Capsule Server in their location and not from the central Satellite
    Server. The Capsule Server also provides localized services such as Puppet Master, DHCP, DNS,
    or TFTP. Capsule Servers assist you in scaling Red Hat Satellite as the number of managed 
    systems increases in your environment.
   
   [ACCESS RED HAT SATELLITE](https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/release_notes/pref-red_hat_satellite-release_notes-introduction#red_hat_satellite_and_proxy_server_life_cycle)

** Request Satellite License

RPM for an X enabled server (not required)

Simple script checking the health of your Satellite once it is set up on your RHEL7 sys:

Simple script for installing Satellite P.O.C on a single node/vm on RHEL7:

    DISCLAMER: Again these are "my scripts" and are not supported in any way (use at own risk) 
               Do not use on a currently running production system. No implied warrenty or other.

REDHATTOOLSINSTALLER

Requirements to run the script

3. Useful Scripts

4. Integration

Red Hat Tiger Team members

more to come

About

Ansible tools and examples


Languages

Language:Shell 95.7%Language:Perl 4.3%