Ansible automation sa technical deck q2 fy19

AUTOMATION FOR EVERYONE
Ansible technical introduction and overview
NAME
Title

3
WHAT IS ANSIBLE AUTOMATION?
Ansible Tower is an enterprise framework for
controlling, securing and managing your Ansible
automation with a UI and RESTful API.
Ansible is an open source community project
sponsored by Red Hat. It’s a simple automation
language that can perfectly describe IT
application environments in Ansible Playbooks.

4
1900+
Ansible modules
31,000+
Stars on GitHub
500,000+
Downloads a month

5
CROSS PLATFORM
Agentless support for all major OS
variants, physical, virtual, cloud and
network devices.
HUMAN READABLE
Perfectly describe and document
every aspect of your application
environment.
PERFECT DESCRIPTION
OF APPLICATION
Every change can be made by
Playbooks, ensuring everyone is on
the same page.
VERSION CONTROLLED
Playbooks are plain-text. Treat them
like code in your existing version
control.
DYNAMIC INVENTORIES
Capture all the servers 100% of the
time, regardless of infrastructure,
location, etc.
ORCHESTRATION PLAYS
WELL WITH OTHERS
Every change can be made by
Playbooks, ensuring everyone is on
the same page.
THE ANSIBLE WAY

6
SIMPLE POWERFUL AGENTLESS
App deployment
Configuration management
Workflow orchestration
Network automation
Orchestrate the app lifecycle
Human readable automation
No special coding skills needed
Tasks executed in order
Usable by every team
Get productive quickly
Agentless architecture
Uses OpenSSH & WinRM
No agents to exploit or update
Get started immediately
More efficient & more secure
WHY ANSIBLE?

7
WHAT CAN I DO WITH ANSIBLE?
Automate the deployment and management of your entire IT footprint.
Orchestration
Do this...
Firewalls
Configuration
Management
Application
Deployment
Provisioning
Continuous
Delivery
Security and
Compliance
On these...
Load Balancers Applications Containers Clouds
Servers Infrastructure Storage And more...
Network Devices

8
WHY IS AUTOMATION IMPORTANT?
Your applications and systems are more
than just collections of configurations.
They’re a finely tuned and ordered list of
tasks and processes that result in your
working application.
Ansible can do it all:
• Provisioning
• App Deployment
• Configuration Management
• Multi-tier Orchestration

9
ANSIBLE’S AUTOMATION ENGINE
CMDB
USERS
INVENTORY
HOSTS
NETWORK
DEVICES
PLUGINS
API
MODULES
PUBLIC / PRIVATE
CLOUD
PUBLIC / PRIVATE
CLOUD
ANSIBLE
PLAYBOOK
CMDB
INVENTORY
HOSTS
NETWORK
DEVICES
PLUGINS
API
MODULES
PUBLIC / PRIVATE
CLOUD
PUBLIC / PRIVATE
CLOUD
USERS
ANSIBLE
PLAYBOOK
PLAYBOOKS
• Written in YAML
• Tasks are executed sequentially
• Invokes Ansible modules
MODULES
• Tools in the toolkit
• Python, Powershell or
any language
• Extend Ansible simplicity
to entire stack
CMDB
INVENTORY
HOSTS
NETWORK
DEVICES
PLUGINS
API
PUBLIC / PRIVATE
CLOUD
PUBLIC / PRIVATE
CLOUD
USERS
ANSIBLE
PLAYBOOK
MODULES
HOW ANSIBLE WORKS
CMDB
PUBLIC / PRIVATE
CLOUD
PLUGINS
• Gears in the engine
• Python that plugs into the
core engine
• Adaptability for various uses
& platforms
USERS
ANSIBLE
PLAYBOOK
HOSTS
NETWORK
DEVICES
API
MODULES
PUBLIC / PRIVATE
CLOUD
INVENTORY
PLUGINS
USERS
ANSIBLE
PLAYBOOK
[web]
webserver1.example.com
webserver2.example.com
[db]
dbserver1.example.com
CMDB
HOSTS
NETWORK
DEVICES
PLUGINS
API
MODULES
PUBLIC / PRIVATE
CLOUD
PUBLIC / PRIVATE
CLOUD
INVENTORY
CLOUD
OpenStack, VMware, EC2,
Rackspace, GCE, Azure,
Spacewalk, Hanlon, Cobbler
CUSTOM CMDB
USERS
ANSIBLE
PLAYBOOK
HOSTS
NETWORK
DEVICES
PLUGINS
API
MODULES
PUBLIC / PRIVATE
CLOUD
INVENTORY
CMDB
PUBLIC / PRIVATE
CLOUD

10
ANSIBLE
THE LANGUAGE OF DEVOPS

DEV QA/SECURITY IT OPERATIONS
BUSINESS
ANSIBLE IS THE UNIVERSAL LANGUAGE
Ansible is the first automation language that can be read and written across IT.
Ansible is the only automation engine that can automate the entire
application lifecycle and continuous delivery pipeline.

12
PLAYBOOK EXAMPLE
---
- name: install and start apache
hosts: web
become: yes
vars:
http_port: 80
tasks:
- name: httpd package is present
yum:
name: httpd
state: latest
- name: latest index.html file is present
copy:
src: files/index.html
dest: /var/www/html/
- name: httpd is started
service:
name: httpd
state: started
---
hosts: web
become: yes
vars:
http_port: 80
tasks:
yum:
name: httpd
state: latest
copy:
service:
name: httpd
state: started
---
hosts: web
become: yes
vars:
http_port: 80
tasks:
yum:
name: httpd
state: latest
copy:
service:
name: httpd
state: started
---
hosts: web
become: yes
vars:
http_port: 80
tasks:
yum:
name: httpd
state: latest
copy:
service:
name: httpd
state: started
---
hosts: web
become: yes
vars:
http_port: 80
tasks:
yum:
name: httpd
state: latest
copy:
service:
name: httpd
state: started
---
hosts: web
become: yes
vars:
http_port: 80
tasks:
yum:
name: httpd
state: latest
copy:
service:
name: httpd
state: started

CLOUD VIRT & CONTAINER WINDOWS NETWORK DEVOPS MONITORING
ANSIBLE AUTOMATES TECHNOLOGIES YOU USE
Time to automate is measured in minutes
AWS
Azure
Digital Ocean
Google
OpenStack
Rackspace
+more
Docker
VMware
RHV
OpenStack
OpenShift
+more
ACLs
Files
Packages
IIS
Regedits
Shares
Services
Configs
Users
Domains
+more
Arista
A10
Cumulus
Bigswitch
Cisco
Cumulus
Dell
F5
Juniper
Palo Alto
OpenSwitch
+more
Jira
GitHub
Vagrant
Jenkins
Bamboo
Atlassian
Subversion
Slack
Hipchat
+more
Dynatrace
Airbrake
BigPanda
Datadog
LogicMonitor
Nagios
New Relic
PagerDuty
Sensu
StackDriver
Zabbix
+more
STORAGE
NetApp
Red Hat Storage
Infinidat
+more
OPERATING
SYSTEMS
RHEL and Linux
UNIX
Windows
+more

15
PLAYBOOK EXAMPLES
LAMP + HAPROXY + NAGIOS
github.com/ansible/ansible-examples/tree/master/lamp_haproxy
WINDOWS
github.com/ansible/ansible-examples/tree/master/windows
SECURITY COMPLIANCE
github.com/ansible/ansible-lockdown
NETWORK
github.com/privateip/network-demo
MORE...
galaxy.ansible.com
github.com/ansible/ansible-examples

16
AUTOMATION FOR TEAMS
Ansible Tower technical introduction and overview

17
WHAT IS ANSIBLE TOWER?
• Role-based access control
• Deploy entire applications with
push-button deployment access
• All automations are centrally logged
Ansible Tower is an enterprise framework for
controlling, securing and managing your Ansible
automation – with a UI and RESTful API.

18
RED HAT ANSIBLE TOWER
RED HAT ANSIBLE ENGINE
Scale + operationalize your automation
Support for your Ansible automation
CONTROL KNOWLEDGE DELEGATION
SIMPLE POWERFUL AGENTLESS
FUELED BY AN INNOVATIVE OPEN SOURCE COMMUNITY

19
USE
CASES
USERS
ANSIBLE
PYTHON CODEBASE
OPEN SOURCE MODULE LIBRARY
PLUGINS
CLOUD
AWS,
GOOGLE CLOUD,
AZURE …
INFRASTRUCTURE
LINUX,
WINDOWS,
UNIX …
NETWORKS
ARISTA,
CISCO,
JUNIPER …
CONTAINERS
DOCKER,
LXC …
SERVICES
DATABASES,
LOGGING,
SOURCE CONTROL
MANAGEMENT…
TRANSPORT
SSH, WINRM, ETC.
AUTOMATE
YOUR
ENTERPRISE
ADMINS
ANSIBLE CLI & CI SYSTEMS
ANSIBLE PLAYBOOKS
….
ANSIBLE
TOWER
SIMPLE USER INTERFACE TOWER API
ROLE-BASED
ACCESS CONTROL
KNOWLEDGE
& VISIBILITY
SCHEDULED &
CENTRALIZED JOBS
CONFIGURATION
MANAGEMENT
APP
DEPLOYMENT
CONTINUOUS
DELIVERY
SECURITY &
COMPLIANCE
ORCHESTRATION
PROVISIONING

20
Client accessing Ansible Tower
Postgre5QL
MANAGED HOSTS DOMAIN CONTROLLER
CMDB
ANSIBLE TOWER INTEGRATIONS

21
ANSIBLE TOWER INTEGRATIONS
EASY AUTHENTICATION SETUP AND INTEGRATION
● Map Tower organizations and teams from SAML attributes
● Easier SAML configuration of two-factor authentication
● Configure multiple LDAP servers in a single Tower
● Tower 3.3 is now an OAuth2 provider
● Users and administrators can create application tokens

23
JOB STATUS UPDATE
Heads-up NOC-style automation
dashboard displays everything going
on in your Ansible environment.
ANSIBLE TOWER

24
ANSIBLE TOWER
ROLE-BASED ACCESS CONTROL
Creates the necessary separation and
isolation of users and resources. Users can
safely use Ansible Tower to work only on the
systems in the environments to which they
have access.
NEW IN ANSIBLE TOWER 3.3
Mapping Ansible Tower organizations and
teams from SAML attributes
Easier SAML configuration of two-factor
authentication
Configure multiple LDAP servers in a single
Ansible Tower instance
Ansible Tower 3.3 is now an OAuth2 provider
Users and administrators can create
application tokens

25
ACTIVITY STREAM
Securely stores every Job that runs, and
enables you to view them later, or export
details through Tower’s API.
ANSIBLE TOWER

26
MULTI-PLAYBOOK WORKFLOWS
Tower’s multi-Playbook workflows chains any
number of Playbooks together to create a single
workflow. Different Jobs can be run depending on
success or failure of the prior Playbook.
ANSIBLE TOWER

27
SCALE-OUT CLUSTERING
Connect multiple Tower nodes into a Tower
cluster to add redundancy and capacity to your
automation platform.
Add reserved capacity, capacity by organization,
deploy remote execution nodes for additional
local capacity.
NEW! Push-button Ansible Tower deployment
and dynamic scaling at runtime for Red Hat
OpenShift Container Platform users
ANSIBLE TOWER

28
MANAGE AND TRACK YOUR INVENTORY
Tower’s inventory syncing and provisioning
callbacks allow nodes to request configuration
on demand, enabling autoscaling.
NEW! Smart Inventories allow you to organize
and automate hosts across all your providers
based on a powerful host fact query engine.
NEW! See alerts from Red Hat Insights directly
from Tower, and use Insights-provided Playbook
Remediation to fix issues in your infrastructure.
ANSIBLE TOWER

29
SCHEDULE JOBS
Enables you to schedule any Job now,
later, or forever.
ANSIBLE TOWER

30
INTEGRATED NOTIFICATIONS
Stay informed of your automation status
via integrated notifications. Connect
Slack, Hipchat, SMS, email and more.
ANSIBLE TOWER

31
SELF-SERVICE IT
Tower lets you launch Playbooks with just a
single click. It can prompt you for variables,
let you choose from available secure credentials
and monitor the resulting deployments.
ANSIBLE TOWER

32
REMOTE COMMAND EXECUTION
Run simple tasks on any host with Tower's
remote command execution. Add users or
groups, reset passwords, restart a malfunctioning
service or patch a critical security issue, quickly.
ANSIBLE TOWER

33
EXTERNAL LOGGING
Connect Tower to your external logging and
analytics provider to perform analysis of
automation and event correlation across your
entire environment.
ANSIBLE TOWER

34
ANSIBLE TOWER
NEW CUSTOM ANSIBLE ENVIRONMENT SUPPORT
● Configurable Ansible version and options per Job
● Custom environments for jobs at organization, project, or job level
● Per-job inclusion of custom modules, libraries
● Delivers granular environment controls to Tower
● Application teams can stay on their trusted version
● Teams can upgrade on their schedules

35
UPCOMING IN TOWER 3.3
ISOLATED NODES
Deploy automation workloads into a DMZ, or other
remote locations
ADVANCED INSIGHTS INTEGRATION
Directly view Red Hat Insights findings, and
automatically remediate them
RESERVED EXECUTION CAPACITY
Limit job capacity available to certain user groups
SMART INVENTORY GROUPS
Customize and dynamically create groups of
servers based on fact data

37
15,000 ROLES AT YOUR DISPOSAL
Reusable Roles and Container Apps that allow you to do more, faster
Built into the Ansible CLI and Tower
galaxy.ansible.com

38
570+
Networking Modules
40
Networking platforms
Use Ansible to manage, validate, and continuously track
heterogeneous network device configurations and deployments.
Network modules are included as part of the Ansible distribution.
ANSIBLE NETWORK AUTOMATION
ansible.com/networking

39
PLAN AND PROTOTYPE VIRTUALLY
Use tasks as reusable building blocks
USE YOUR CURRENT DEVELOPMENT PRACTICES
Agile, DevOps, Waterfall
GO BEYOND THE “PING” TEST
Integrate with formal testing platforms
BE CONFIDENT DURING DEPLOYMENT
Validate changes were successful
ENSURE AN ON-GOING STEADY-STATE
WHY AUTOMATE YOUR NETWORK?

40
---
- name: configure ios interface
hosts: ios01
tasks:
- name: collect device running-config
ios_command:
commands: show running-config interface GigabitEthernet0/2
provider: “{{ cli }}”
register: config
- name: administratively enable interface
ios_config:
lines: no shutdown
parents: interface GigabitEthernet0/2
when: ‘”shutdown” in config.stdout[0]‘
- name: verify operational status
ios_command:
commands:
- show interfaces GigabitEthernet0/2
- show cdp neighbors GigabitEthernet0/2 detail
waitfor:
- result[0] contains ‘line protocol is up’
- result[1] contains ‘iosxr03’
- result[1] contains ’10.0.0.42’
PLAYBOOK EXAMPLE: NETWORK AUTOMATION

41
70+
Windows Modules
Use Ansible to deploy and manage Windows
systems and applications.
ANSIBLE WINDOWS AUTOMATION
ansible.com/windows
350+
Powershell DSC
resources

42
- hosts: new_servers
tasks:
- name: ensure common OS updates are current
win_updates:
register: update_result
- name: ensure domain membership
win_domain_membership:
dns_domain_name: contoso.corp
domain_admin_user: '{{ domain_admin_username }}'
domain_admin_password: '{{ domain_admin_password }}'
state: domain
register: domain_result
- name: reboot and wait for host if updates or domain change require it
win_reboot:
when: update_result.reboot_required or domain_result.reboot_required
- name: ensure local admin account exists
win_user:
name: localadmin
password: '{{ local_admin_password }}'
groups: Administrators
- name: ensure common tools are installed
win_chocolatey:
name: '{{ item }}'
with_items: ['sysinternals', 'googlechrome']
PLAYBOOK EXAMPLE: WINDOWS

43
Have you used Ansible already?
Try Tower for free: ansible.com/tower-trial
Would you like to learn Ansible?
It’s easy to get started: ansible.com/get-started
Want to learn more?
Videos, webinars, case studies, whitepapers: ansible.com/resources
GETTING STARTED

Ansible automation sa technical deck q2 fy19

More Related Content

What's hot (20)

Similar to Ansible automation sa technical deck q2 fy19 (20)

Recently uploaded (20)

Ansible automation sa technical deck q2 fy19