Ansible Automation Platform.pdf
- 1. Presenter’s Name Title Nguyen Hoang Chung Solution Architect 1 Creating, operating, and consuming automation Red Hat Ansible AutomationPlatform
- 2. Agenda Red Hat Ansible Platform technical deck 2 ▸ Why automation? ▸ Why Red Hat Ansible Automation Platform? ▸ What make a platform? ▸ Common Use Cases ?
- 3. Why Automation? 3 • Why Automation? • Why Red Hat Ansible Automation Platform? • What make a platform? • Common Use Cases ?
- 4. Gartner Technology Trends 2022 https://www.gartner.com/en/information-technology/insights/top-technology-trends
- 5. “...3 out of 5 respondents report automation as one of their firm’s top initiatives…” “...it’s a Boardroom imperative…” Forrester “...Automation becomes a strategic multiplier of teams productivity…” “ ...86% say it’s critical for their cloud strategy…” IDC “...Automation is at the core of changes happening in I&O…” Gartner Enable self-service through automation of repetitive tasks Integrate Enable Self-Service Go Faster Automate across processes, teams and domains at scale Automation is a strategic priority* Integrate OpenShift into other systems and processes Automation is Important
- 6. Why the Red Hat® Ansible® Automation Platform? Red Hat Ansible Platform technical deck 6 • Why Automation? • Why Red Hat Ansible Automation Platform? • What make a platform? • Common Use Cases ?
- 7. Red Hat Ansible Automation Platform by the numbers 7 Source: Gardner, Chris, Glenn O'Donnell, Robert Perdonii, and Diane Lynch. "The Forrester Wave™: Infrastructure Automation Platforms, Q3 2020." Forrester, 10 Aug.2020. DISCLAIMER: The Forrester Wave™ is copyrighted by Forrester Research, Inc. Forrester and Forrester Wave™ are trademarks of Forrester Research, Inc. The Forrester Wave™ is a graphical representation of Forrester’s call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the ForresterWave™. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change. Red Hat named a Leader in The Forrester Wave™ Received highest possible score in the criteria of: Infrastructure Automation Platforms, Q3 2020 ▸ Deployment functionality ▸ Product vision ▸ Partner ecosystem ▸ Supporting products and services ▸ Community support ▸ Planned product enhancements “Ansible continues to grow quickly, particularly among enterprises that are automating networks. The solution excels at providing a variety of deployment options and acting as a service broker to a wide array of other automation tools.” “Red Hat’s solution is a good fit for customers that want a holistic automation platform that integrates with a wide array of other vendors’ infrastructure.”
- 8. Why the Red Hat Ansible Automation Platform? 8 Simplify automation creation and management across multiple domains. Agentless Simple Easily integrate with hybrid environments. Powerful Orchestrate complex processes at enterprise scale. Why the Ansible Automation Platform?
- 9. Clouds Storage Your entire IT footprint Why the Red Hat Ansible Automation Platform? 9 Automate the deployment and management of automation Do this... Orchestrate Firewalls Manage configurations Deploy applications Provision / deprovision Deliver continuously Secure and comply Load balancers Applications Containers Virtualization platforms Servers And more ... Network devices On these...
- 10. 110+ Why the Red Hat Ansible Automation Platform? Network Security Infrastructure Cloud certified Content Collections 10
- 11. What makes a platform? Red Hat Ansible Platform technical deck 11 • Why Automation? • Why Red Hat Ansible Automation Platform? • What make a platform? • Common Use Cases ?
- 12. What makes a platform? 12 Automation controller Automation hub Automation services catalog Fueled by an open source community & Powered by a Red Hat Subscription Insights for Ansible Automation Platform Ansible command line Ansible Cloud Services On-premises Ansible content domains Security Content creators Operators Domain experts Users Network Cloud Linux Windows Datacenter
- 13. Holistic automation for your enterprise What makes a platform? 13 Create ▸ Operate ▸ Consume ▸
- 14. Create Red Hat Ansible Platform technical deck 14
- 15. Automation hub Ansible content experience The automation lifecycle Create Red Hat Ansible Platform technical deck: Create 15 Domain experts Ansible content domains Content creators Build Discover Trust Red Hat cloud / on-premises Security Network Cloud Linux Windows Datacenter
- 16. Ansible playbooks Red Hat Ansible Platform technical deck: Create 16 --- - name: cài đặt và kích hoạt start apache hosts: web become: yes tasks: - name: cài đặt httpd package mới nhất yum: name: httpd state: latest - name: khởi tạo index.html file template: src: files/index.html dest: /var/www/html/ - name: kích hoạt httpd service: name: httpd state: started
- 17. Red Hat Ansible Platform technical deck: Create 17 What makes up an Ansible playbook? Plugins Modules Plays
- 18. Reusable automation actions Ansible roles Red Hat Ansible Platform technical deck: Create 18 What are they? Group your tasks and variables of your automation in a reusable structure. Write roles once, and share them with others who have similar challenges in front of them. --- - name: install and start apache hosts: web roles: - common - webservers
- 19. Simplified and consistent content delivery Collections Red Hat Ansible Platform technical deck: Create 19 What are they? Collections are a data structure containing automation content: ▸ Modules ▸ Playbooks ▸ Roles ▸ Plugins ▸ Docs ▸ Tests
- 20. Trusted source Automation Hub Red Hat Ansible Platform technical deck: Create 20 Customer controlled Deploying either on-prem or to a cloud, customers can run their own private instances of Automation Hub integrated into Red Hat Ansible Automation Platform. Private content Manage the lifecycle and internal distribution of in-house Ansible content within Private Automation hub. Customizable Content Catalog Via synch from community (Galaxy) and supported (Automation Hub) sources, customers can supply internal users with approved content in one controlled location in Private Automation hub.
- 21. Automation Hub Certified Content Collections Red Hat Ansible Platform technical deck: Create
- 22. Operate Red Hat Ansible Platform technical deck 22
- 23. Automation controller The automation lifecycle Operate Red Hat Ansible Platform technical deck: Operate 23 Automation hub Ansible command line Operators Control Manage Deploy Insights for Ansible Automation Platform On-premises Ansible Cloud Services
- 24. Where it all starts A playbook run Red Hat Ansible Platform technical deck: Operate 24 ▸ A playbook is interpreted and run against one or multiple hosts - task by task. The order of the tasks defines the execution. ▸ In each task, the module does the actual work.
- 25. Running at the core Execution of content Red Hat Ansible Platform technical deck: Operate 25 ▸ The central execution of automation content is managed and done either via central cluster.. ▸ Can also sync git repositories, takes care of execution environments, collections, credentials, inventory and logging. ▸ Full audit trail of the execution, including what version of content was executed, what variable values were provided, etc.
- 26. How to talk to others Inventories and credentials 26 ▸ An inventory is a collection of hosts (nodes) with associated data and groupings that the automation platform can connect to and manage: ∙ Nodes ∙ Groups ∙ Can be static or dynamic ∙ Smart inventories possible ▸ And what usernames and passwords do you use during connection? That is kept in the credentials. Red Hat Ansible Platform technical deck: Operate
- 27. Combine automation to create something bigger Workflows Red Hat Ansible Platform technical deck: Operate 27 ▸ Workflows enable the creation of powerful holistic automation, chaining together multiple pieces of automation and events. ▸ Simple logic inside these workflows can trigger automation depending on the success or failure of previous steps.
- 28. Integration of automation into larger workflows API Red Hat Ansible Platform technical deck: Operate 28 ▸ The API provides programmatic access to the automation via a defined interface. ▸ Underneath it is still powered by the same bits and pieces which are at the core: workflows, inventories, etc. ▸ It offers simple integration into other tools like ITSM, SOAR, etc.
- 29. Understand what is going on Dashboards Red Hat Ansible Platform technical deck: Operate 29 Overview of the actual cluster, the jobs happening, the nodes connected, what works and fails right at this moment. Overview across clusters, better insight into use cases of automation; insight into adoption of automation per organization.
- 30. Consume Red Hat Ansible Platform technical deck 30
- 31. Automation hub Automation controller The automation lifecycle Consume Red Hat Ansible Platform technical deck: Consume 31 Ansible Content Domains Ansible command line Automation services catalog Domain experts Users Execute Integrate Ansible content domains Infrastructure Cloud Network Security Linux Windows Adopt
- 32. Automation job Red Hat Ansible Platform technical deck: Consume 32 Role based access control Self service Approval Web UI Control plane Execution Plane Users Users Users Execution environments API
- 33. Provide others the mean to consume Self service Red Hat Ansible Platform technical deck: Consume 33 For teams directly accessing the automation environment and are close to the automation platform processes. For high level access distant or not even aware of the underlying automation environment; lines of business for example.
- 34. How to manage access Role-based access control Red Hat Ansible Platform technical deck: Consume 34 ▸ Role-based access control system: Users can be grouped in teams, and roles can be assigned to the teams. ▸ Rights to edit or use can be assigned across all objects. ▸ All backed by enterprise authentication if needed.
- 35. Govern access Approval Red Hat Ansible Platform technical deck: Consume 35 ▸ Approval processes allow a human interaction to the automation, to add governance like human level administration. ▸ Both available at the operational level on the Automation controller UI as well as in the service catalog level.
- 36. Incorporate automation into your ITSM IT service management integration (ITSM) Red Hat Ansible Platform technical deck: Consume 36 ▸ Integrate high level workflows in existing ITSM toolsets with the automation platform. ▸ Have the automation platform reach out to the ITSM system whenever things are changing, including data transmission between the tools.
- 37. Common use cases ? Red Hat Ansible Platform technical deck 37 • Why Automation? • Why Red Hat Ansible Automation Platform? • What make a platform? • Common Use Cases ?
- 38. Provisioning Infra- Server - Install OS - Harden OS - Storage - Network Infra- Middleware - Install Database - Install IIS - Install Java - Harden - Middleware Config Management Server Configuration Setting - Changes (Infra) - System (e.g. OS) - Network - Storage - Database Apps Server Config Changes - Middleware - Database Patch Management - Verify Patches - Apply Patch - Status Verification - Health Check - Backup for Security & Network Devices - VLAN Creation - Network Status Security & Governance Network Admin Planned Activities - Policy Enforcement - Hardening Unplanned Activities - Audits - Urgent Vulnerability Patch Daily Activities - Health Check - Rights Management Application Performance Management RESTful API RESTful API / NETCONF / OpenSSH / WinRM Provisioning Config Management Patch Management Network Admin Applications Infra- Server - Install OS - Harden OS - Storage - Network Infra- Middleware - Install Database - Install IIS - Install Java - Harden - Middleware Server Configuration Setting - Changes (Infra) - System (e.g. OS) - Network - Storage - Database Apps Server Config Changes - Middleware - Database - Verify Patches - Apply Patch - Status Verification - Health Check - Backup for Security & Network Devices - VLAN Creation - Network Status Planned Activities - Policy Enforcement - Hardening Unplanned Activities - Audits - Urgent Vulnerability Patch Daily Activities - Health Check - Rights Management ITSM DevOps User Requests Developer Requests RESTful API NETCONF OPENSSH WINRM
- 40. ● Infrastructure as Code (IaC) ● GitOps & Infrastructure as Code (IaC) ● ITSM Integration ● CyberArk Integration (AAM - CP/CCP) ● DevSecOps and Application CI/CD ● Linux/Windows Servers Compliance & Hardening ● Patch Management ● Public Cloud Automation ● VMware & Ansible Automation ● Ansible with HashiCorp Packer & Terraform ● Azure DevOps with Terraform and Ansible ● Disaster Recovery Automation ● AIOps and Event Driven Automation ● Vulnerability Assessment (VA) Automation Common Ansible Automation Use Cases ● Nutanix PRISM Automation with Ansible ● Database Management ● Storage Automation ● Middleware Automation ● Antivirus Software Management ● Network Automation ● Windows Automation ● Security & Compliance Automation - Ops Team ● Security Automation - Security Team ● Red Hat Advanced Cluster Management & Red Hat Ansible Automation Platform ● Kubernetes Platform Management ● Ansible for Telco - NFVi, RAN & Mobile Core
- 42. ● Integrate Ansible Tower with Vulnerability Assessment (VA) Tools such as Qualys, Nexpose Rapid7 and Tenable Nessus (using RESTful APIs) ● Use Cases ○ Add new asset and perform VA scan ○ Perform ad-hoc VA scan on asset ○ Generate HTML reports for the VA scan ○ Perform required remediations using Ansible Automation Platform VA Integration & Use Cases
- 43. VM Auto Scaling
- 44. linkedin.com/company/red-hat youtube.com/user/RedHatVideos facebook.com/redhatinc twitter.com/RedHat 44 Red Hat is the world’s leading provider of enterprise open source software solutions. Award-winning support, training, and consulting services make Red Hat a trusted adviser to the Fortune 500. Thank you