INTRODUCING Red Hat ANSIBLE Automation Platform

INTRODUCING Red Hat ANSIBLE Automation Platform

1. INTRODUCING Red Hat ANSIBLE
Automation Platform
Kriangsak J.
Solution Architect Red Hat Thailand

2. What is IT Automation ?

Why we need IT Automation ?

3. CONFIDENTIAL designator Gartner 12 Top Strategic Technology Trends 2022
Automation as a foundational layer

●Reinforces Delivery: Add speed, scalability and
surety to the underlying foundation of all your
technology pieces.

●Underlying Debts: Organizations are often
dragged down by technical, process, data,
architecture, and security debt. This adds an
extensive and expensive set of business
processes underpinned by a patchwork of
technologies that are often not optimized, lean,
connected or consistent.

●Support New Initiatives: Organizations have to
digitize their documents/artifacts and ensure
their business and IT process workflows were
digital. They need to automate tasks, processes
and orchestrate automation across functional
areas.

Source: Gartner Technology Trends 2022

4. CONFIDENTIAL designator Why Red Hat Ansible Automation Platform?
4
Ansible is the de facto automation language.
Human-readable language
with quick adoption
AgentlessSimple
Easily integrate with
hybrid environments
Powerful
Universal language spanning
multiple IT domains

5. CONFIDENTIAL designator
Shell Script vs Ansible
Shell Script

if ! rpm -qa | grep -qw ntp; then
yum install -y ntp
fi

# Start ntpd if it's not already running.
if ps aux | grep -q "[n]tpd"
then
echo "ntpd is running." > /dev/null
else
systemctl start ntpd.service > /dev/null
echo "Started ntpd."
fi

# Make sure ntpd is enabled on system startup.
systemctl enable ntpd.service
Ansible Playbook

---
- name: Install, enable and start ntp
hosts: all
become: yes
gather_facts: false

tasks:
- name: Install ntp
yum:
name: ntp
state: present

- name: Enable and start service
service:
name:ntpd
state: started
enabled: yes

6. CONFIDENTIAL designator
Shell Script vs Ansible
Python Script

def show_version(a_device):
remote_conn = ConnectHandler(**a_device)
print()
print("#" * 80)
print(remote_conn.send_command_expect("show version"))
print("#" * 80)
print()


print("\nElapsed time: " + str(datetime.now() - start_time))


if __name__ == "__main__":
main()
Ansible Playbook

---
- name: Show version and Record Time
hosts: cisco
gather_facts: false

tasks:
- name: Run show version on remote devices
cisco.ios.ios_command:
commands: show version

7. Red Hat Ansible Automation Platform technical deck | Create
7
What is it?
▸The main building block for Ansible
▸Simple YAML syntax to develop Ansible
Playbooks
▸Provides CLI tools to develop, test and
run playbooks
▸Pluggable architecture that allows
extensions through Content
Collections
---
- name: Shutdown VM guest
hosts: localhost
gather_facts: false
tasks:
- name: Turn off specified VM guest
vmware.vmware_rest.vcenter_vm_guest_power :
state: shutdown
vm: 1021343
vcenter_hostname: vcenter.demoredhat.com
vcenter_username: admin
vcenter_password: tedlasso


Ansible Core (ansible-core)

8. Another Ansible Playbook Example
---
- name: snmp ro/rw string configuration
hosts: cisco
gather_facts: false

tasks:
- name: ensure snmp strings are present
cisco.ios.config:
lines:
- snmp-server community ansible-public RO
- snmp-server community ansible-private RW

9. ---
- name: configure ios interface
hosts: ios01
tasks:
- name: collect device running-config
ios_command:
commands: show running-config interface GigabitEthernet0/2
provider: “{{ cli }}”
register: config

- name: administratively enable interface
ios_config:
lines: no shutdown
parents: interface GigabitEthernet0/2
provider: “{{ cli }}”
when: ‘”shutdown” in config.stdout[0]‘

- name: verify operational status
ios_command:
commands:
- show interfaces GigabitEthernet0/2
- show cdp neighbors GigabitEthernet0/2 detail
waitfor:
- result[0] contains ‘line protocol is up’
- result[1] contains ‘iosxr03’
- result[1] contains ’10.0.0.42’
provider: “{{ cli }}”
9
Playbook Example: Cisco Automation


Ansible Network Automation

10. What is Red Hat Ansible Automation Platform?
10
v
---
- name: Install and start apache
hosts: web
become: true

tasks:
- name: Ensure the httpd package is installed
ansible.builtin.yum:
name: httpd
state: present

- name: Create the index.html file
ansible.builtin.template:
src: files/index.html
dest: /var/www/html/

- name: Start the httpd service if needed
ansible.builtin.service:
name: httpd
state: started
Red Hat Ansible Automation Platform technical deck | Create
10
Ansible playbooks

11. CONFIDENTIAL designator Why Red Hat Ansible Automation Platform?
11
Supported and certified content you can trust.
Network SecurityInfrastructure Cloud Edge 140+
Certified Content
Collections

55+
Certified technology
partners

12. CONFIDENTIAL designator What is Red Hat Ansible Automation Platform?
12
The capabilities you need across your IT footprint.
Applications Network Cloud Security Infrastructure
▸ DevOps
▸ CI/CD
▸ GitOps
▸ Configuration
management
▸ Infrastructure
awareness
▸ Network validation
▸ Orchestration
▸ Operationalisation
▸ Governance

▸ Investigation
enrichment
▸ Threat hunting
▸ Incident response
▸ Deployment
▸ Provisioning
▸ Management
▸Extend security
▸Scalability
▸Interoperability
Edge

13. CONFIDENTIAL designator
Common Integrations

14. CONFIDENTIAL designator
Infrastructure as Code
Benefits of Infrastructure as Code

○Cost Reduction
■Do more with the same team size
○Speed
■Faster execution
○Risk
■Remove errors and security violations
Infrastructure as Code (IaC) is the process of managing and provisioning
computer data center through machine-readable definition files, rather than
physical hardware configuration or interactive configuration tools

15. CONFIDENTIAL designator
Networking
Security
Cloud
InfrastructureOne platform for all your
automation needs.
Applications
Powerful Simple Agentless

16. 16
Red Hat Ansible
Automation Platform 2:
Component overview

17. INSERT CONFIDENTIAL designator
Stabilize
Product development model
Automation and IT modernization
17
We participate in and
create
community-powered
upstream projects.
1
1,000,000+
projects
We integrate upstream
projects, fostering open
community platforms.
We stabilize and commercialize these
platforms, including a rich ecosystem
of services and certifications.
IntegrateParticipate
2 3

18. Red Hat is doing for containers and Cloud what Red Hat did for Linux 15 years ago.
Transform with Red Hat.
18
Enterprise Open Source Software is powering
Digital Transformation and Business Innovation


Open source

19. 19
1+
Red Hat Ansible Automation Platform

Automation controller
Automation control plane

Automation execution
environments
Scalable packaging and
runtime execution plane

Automation mesh
Connectivity across diverse
enterprise automation
environments

Automation hub
Hosted certified content
repository.

Automation services
catalog
Self-service capability

Red Hat Insights for Ansible
Automation Platform
Visibility, predictive analytics
and more
Ansible Content
Collections
100+ certified content
collections
Ansible-builder
Ansible containerized
execution environment
builder
Ansible-navigator
Execution environment
orchestration tooling
Ansible Platform Operator
Package, deploy and manage
this platform on Red Hat
OpenShift
Microsoft VS.code plugin
Write and manage Ansible
code with Visual Studio

20. NDA | CONFIDENTIAL
A Red Hat subscription provides substantial value
Receptor | Podman | Automation Hub
Registry | Collections | AWX | Ansible Operator
ansible-navigator | ansible-builder | VS Code
Molecule | Ansible Core | Python | RHEL UBI
Execution Environments | Analytics | Insights
Galaxy | PostgreSQL, etc, etc
Red Hat Ansible Automation Platform
Productize Get in and DRIVE
Upstream projects Enterprise product
Integration | Q&A |Hardening
SLA | Support
Documentation | Training
Lifecycle Management | Migration
Certification

21. Red Hat Ansible Automation Platform technical deck | Manage
23
What is it?
Automation controller is the Ansible
Automation Platform control plane which
enables users to define, operate, and delegate
automation across their enterprise
Automation controller provides:
▸WebUI and API
▸Role-based access control
▸Powerful workflows
▸Centralized logging
▸Credential management
▸Push-button automation
Automation controller
WebUI
API
RBAC Workflows Audit
Automation controller. Define, operate, and delegate.

22. Red Hat Ansible Automation Platform technical deck | Manage
24
Enterprises need more for their automation.
Automation
workflows
User
management
Centralized logging
and audit trail
System
integration
Automation
controller
Credential management

23. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
56
What is it?
Collection of endpoints against which jobs
may be launched
▸Multiple inventory sources supported
▸Dynamic endpoint discovery
▸Logically group endpoints by metadata or
user-defined filters
▸Granular RBAC permissions
Inventories. What do I want to run my automation on?

24. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
58
Job Templates. Bringing it all together.
What is it?
▸Define and standardize running automation
▸Reusable and shareable
▸Leverage agile practices, such as GitOps and
event-driven automation

25. CONFIDENTIAL designator
Credentials. Securing resource and endpoint access.
Red Hat Ansible Automation Platform technical deck | Manage
59
What is it?
▸Securely manage credentials needed
for automation resources
▸Multiple credential types supported
▸Integrate external secret management systems
▸Create custom credential types and plugins
▸Use RBAC to govern access
▸Actual credential never exposed

26. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
60
Projects. Adding your automation content to controller.
What is it?
Logical collection of your playbooks:
▸Multiple source types supported
▸Source Control Management (SCM) integration and
update strategies
▸Red Hat Insights integration
▸Role-based access control (RBAC) and schedules

27. CONFIDENTIAL designator
Role-Based Access Control. Who can use my automation?
Red Hat Ansible Automation Platform technical deck | Manage
61
What is it?
Securely govern access to your automation
▸Logically group controller objects and
grant users and teams read, execute,
edit permissions
▸Use predefined roles to grant access
▸Integrates with your existing enterprise
authentication systems

28. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
62
Securing your content in automation controller. Delegate.
Defined
automation
Teams
Users
Automation controller
LDAPActive Directory
Identity and access management
SocialRADIUS
TokenSAML
RBAC Organizations

29. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
63
Workflows. Solve complex problems.
What is it?
▸Workflows enable the creation of powerful
holistic automation, chaining together
multiple pieces of automation and events
▸Simple logic inside these workflows can
trigger automation depending on the
success or failure of previous steps
▸Add approvals to your workflows to
enhance governance
▸Integrate other systems, such as ITSM to fit
with your existing controls and processes

30. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Scale
64
Automation controller approvals. Integrate and govern.
What is it?
▸Adds human interaction to the automation
for administration and governance
▸Available at the operational level on the
Automation controller UI as well as in the
service catalog level

31. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
65
What is it?
▸Controller launching an instance of
defined automation
▸Relaunch automation jobs
▸Use Job Details to view job outputs
▸Troubleshoot automation execution using
filtered views
Automation jobs. Executing your defined automation.

32. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
66
Automation controller logging aggregation.
What is it?
▸Provides the capability to send detailed
logs to several kinds of 3rd party external
log aggregation services
▸Use Red Hat Enterprise Linux rsyslog to
aggregate and redirect logs
▸Native integration exists for multiple 3rd
party logging systems
▸Multiple detailed logs are gathered for job
events, system facts, users, activity
streams, and controller features

33. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
67
What is it?
▸The API provides programmatic access
to the automation via a defined interface
▸Underneath it is still powered by the same
bits and pieces which are at the core:
workflows, inventories, etc
▸It offers simple integration into
other tools like ITSM, SOAR, etc
Automation controller API.
Integrate and elevate your automation.

34. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Scale
68
IT service management integration (ITSM).
Integrate and govern.
Incorporate automation into your ITSM
▸Integrate high level workflows in existing
ITSM toolsets with the automation platform.
▸Apply organization governance and integrate
your automation to larger business
processes
▸Have the automation platform reach out to
the ITSM system whenever things are
changing, including data transmission
between the tools

35. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Scale
69
What is it?
▸User-friendly, self-service interface in
automation controller
▸Abstracts complexity using question
and answer format
▸Best suited for teams directly
accessing automation and close to
the automation practice
▸Access and execution governed using
controller features
Automation controller surveys. Adopt and grow.

36. CONFIDENTIAL designator
70
Consumers
Automation Controller
Public Cloud
Dynamic
provisioned
execution
Edge
Datacenter
DMZ
Private Automation Hub
Formerly Tower
Supported Integrations
Centralized & Controlled
Content Repository
Calculate, Plan, Report
Scale Across Remote Networks
Operate, Delegate, Control
Cloud Native Architecture w/
Containerized Execution

37. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
71
What is it?
▸Overview of automation controller, the
jobs happening, the nodes connected and
what worked and failed
▸Provides the ability to quickly spot
irregularities and drill into more details
Automation controller dashboard.
View your automation status.

38. 72
Ansible Automation
Platform 2:
Summary + Installation

39. What is Red Hat Ansible Automation Platform?
73
Ansible Automation Platform hosting options


Red Hat Enterprise Linux 8.3+
x86_64 (physical, virtual)
Red Hat OpenShift via dedicated
Ansible Automation Platform
operator (physical, virtual)
On Microsoft Azure
marketplace
Self Managed (on-premises or cloud) Customer deployed
Managed by Red Hat*
* Red Hat Ansible Automation Platform on Azure is now available to all customers in North America and EMEA, with global availability coming soon.
On AWS
marketplace
On Google Cloud
marketplace
Customer deployed,
Self-managed

40. Microsoft VS Code extension


What is the Ansible extension?
An extension and language server
written using Microsoft’s language
server protocol implements
autocomplete, error-checking,
jump-to-definition, docs and
additional features to aid in creating
automation content

41. CONFIDENTIAL designator
77
Red Hat Ansible Automation Platform technical deck | Create
Ansible VS Code extension.
Simplifying content creation.
What is it?
▸Syntax highlighting of keywords such
as module names
▸Live validation of your code while
you type
▸Integration with ansible-lint*
▸Autocompletion on play, block or
task contents etc
▸Documentation references as you code
* ansible-lint was released as Technology Preview in Ansible Automation Platform version 2.2

42. CONFIDENTIAL designator Automation Hub.

43. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
83
What is it?
Track and measure the total value of
automation efforts by time and cost savings
▸Automation calculator looks at at the total
ROI of your automation
▸Calculations are based on automation
data across your organization
▸Job template savings are compared to
costs of performing the tasks manually
▸Measure the ROI of your automation
investment and identify automation that
contributes the most savings
Automation calculator. Analyze and aggregate.

44. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Manage
84
What is it?
Prioritize automation by projecting the 1- to
3-year savings by time and money for each
automation task
▸Predict ROI and time savings based on a
given automation task
▸Use your automation data from your
organization to prioritize tasks and
projects based on business value
Automation Savings Planner. Analyze and aggregate.

45. Execution layers of Event Driven Automation
Event
Source
Message
Layer
Service
Layer
Routing
Layer
Automation
Event- Driven Ansible
Optional
Ansible Playbooks

Ansible Modules (ie.
SNOW ticket update, or
API call)

Metrics driven value

Management interface
Sources Rules Actions
88

46. Ansible Rulebooks
▸Events are processed by a rules engine
▹Rules trigger based on conditions and
actions can be carried out by the rules
engine
▹Rules are organized into Ansible Rulebooks
▹Ansible rules can apply to events occurring
on specific hosts or groups

▸Conditional management of actions to
events
▹Simple YAML structure for logical conditions
▹Events can trigger different types of actions:
■Run Ansible Playbooks
■Run Modules
■Post new events to the event handler

▸YAML-like format familiarity
▹Current Ansible users quickly learn and use
Rulebook writing
Developer preview: Event-Driven Ansible

47. Ansible Playbooks vs Ansible Rulebooks
Developer preview: Event-Driven Ansible

48. NEW Ansible Certified Content Collection for Terraform
cloud.terraform
Overview
▸Release: November 28, 2022

▸Enables an Ansible automation playbook to initiate a Terraform automation workflow
(plan)

▸Automates the management and provisioning of infrastructure as code using
Terraform and AAP, as the primary automation platform, to automate configuration
and life cycle management
Details:
▸Includes two modules, with one module compatible with the current
community.general.terraform module for general Terraform functionality

▸Modules are a wrapper for the open source terraform command line tool

▸Certified to support the following:
○Providers: AWS, Azure, Google Cloud
○Backends: azurerm, gcs, s3

49. 93
vs
Community
Ansible Automation
Platform 2:

50. CONFIDENTIAL designator
Community
Stability and
security
Security Training Support Integration
Ansible
Learning Path
Professionals
Support with
defined SLAs
Partner
integrations
Easy to Access
Simple to get
started
A Lot of
Community
resource
Standalone tool
94
Automation Journey

51. CONFIDENTIAL designator
Level 1 Level 2 Level 3 Level 4 Level 5
Aware Standardized Proactive Institutionalized Optimized
Speed
Scale
Reliability
Effort
per
change
Automation Maturity. Develop & Manage a Tool or Develop & Scale Automation
Community / AWX
Use FTE’s to engineer an automation
tool and spend valuable time
maintaining to keep the automation
working
Ansible Automation
Platform
Improve rate of Automation
Capability

Repurpose engineering from
“maintaining a tool” to advancing
automation capability -> Mission
critical

Create an automation first culture of
innovation by accelerating
automation maturity for optimization
“We have been using open-source for
five years”
“...some of our internal teams
came to me and asked to use it
for mission-critical applications”
“...we wanted a
continuation of what we
have built (with Red Hat
Ansible)”

52. 97
Ansible Automation
Platform 2:
Use Case

53. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Use cases
98
Ansible Automation Platform for Power System and System i.
Physical LPAR
https://www.ansible.com/integrations/infrastructure/ibm-power-systems
Installation and configuration — IBM ansible-power-aix-sap collection 1.1.0 documentation
VIOS NIM HMC
Day 1 configuration
▸Config Virtual I/O Server
▸Install mksysb image
▸Create and manage LPAR
▸Performs NIM operations - server setup, install packages, update SP or TL
▸Uses NIM to manage backup of LPAR or VIOS clients
▸Patch Management and Security Management
▸Backup rootvg
▸Change attribute of all devices in define state
▸Create and modify local and nfs file system
▸Install rpm package and software deployment
▸Manage user and group
▸Manage LVM logical volume
Day 2 operations
OS: AIX 7.1 TL5 or AIX 7.2 TL4 and higher
Python on AIX: 2.7 or later
AIX OpenSSH
sudo
5733SC1 Base and Option 1
5770DG1
Python 3
V8R8.7.0 or V9R1 or later
OS : AIX 7.1 TL3
Python on AIX : 2.7
Python on VIOS: 2.7 or later
VIOS OS: 2.2.5 or later
VIOS OpenSSH

54. What is Red Hat Ansible Automation Platform?
99
v
---
- name: AIX Patching Playbook
hosts: nim01
var: true
oslevel: 7200-05-02
nim_lpp_source: 7200-05-02-2114-lpp-source
collections:
- ibm.power_aix

tasks:
- name: Download AIX updates
nim_suma:
action: download
download_dir: “/export/nim/lpp_source”
lpp_source_name: “{{ nim_lpp_source }}”
oslevel: “{{ oslevel }}”
targets: ‘bruce, freddie’
Red Hat Ansible Automation Platform technical deck | Create
99
Ansible playbooks for D/L update on NIM master

55. What is Red Hat Ansible Automation Platform?
100
v
---
- name: AIX Patching Playbook
hosts: bruce,freddie
var:
nim_lpp_source: 7200-05-02-2114-lpp-source
nim_master: nim01
collections:
- ibm.power_aix

tasks:
- name: Cleanup any existing alt_disk_copy
alt_disk:
action: clean

- name: Create an alt_disk_copy for backup
alt_disk:
targets: hdisk1

- name: Run AIX Update
nim:
action: update
lpp_source_name: “{{ nim_lpp_source }}”
targets: “{{ ansible_hostname }}”
delegate_to: “{{ nim_master }}”
Red Hat Ansible Automation Platform technical deck | Create
100
Ansible playbooks for patch the NIM client system

56. What is Red Hat Ansible Automation Platform?
101
v
---
- name: Check and Download required to update to SP 7.2.3.2
suma:
action: download
oslevel: ‘7200-03-02’
download_only: yes
download_dir: “/tmp/dl_updt_7200-03-02”
when: ansible_distribution == ‘AIX’

---
- name: Check , Download and Install to latest SP of 7.2.4
suma:
action: download
oslevel: ‘7200-04’
last_sp: yes
extend_fs: no

Red Hat Ansible Automation Platform technical deck | Create
101
Ansible playbooks for D/L update on NIM master

57. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Use cases
102
Ansible Automation Platform for IBM System Storage.
Day 1 configuration
▸Initial Setup Configuration , Configure IP , Call Home , Create user
▸Manage hosts: Create , Delete or modify hosts
▸Manage Volumes: Create , Delete or extend the capacity of volumes
▸Manage mdisk : Create or Delete a managed disk
▸Manage pool : Create or Delete a pool
▸Manage Volume Map : Create or Delete a Volume Map
▸Collect facts: Collect basic information including hosts, host groups ,
snapshots , consistency groups and volumes
▸Manage consistency group snapshot - Create or delete consistency
group snapshots
▸Manage snapshot , Create , Delete Snapshot , Flash copy
▸Manage volume cone : Create or Delete volume clone , Remote Copy
▸Switches the replication
▸Manages host cluster
▸Manages remote support assistance configuration
Day 2 operations
IBM Spectrum Virtualize
for Public Cloud
Flash System
5xxx, 7xxx , 9xxx
Storwize
5000 , 5100 , 7000
Automation Hub IBM Spectrum Virtualize module
Concurrent Compatibility and Code Cross Reference for Spectrum Virtualize (ibm.com)
ansible-collections/ibm.spectrum_virtualize: IBM Spectrum Virtualize (github.com)
versions above 8.1.3, except versions 8.3.1.3 and 8.3.1.4.

58. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Use cases
104
Ansible Automation Platform for Linux.
Provisioning
▸Work seamlessly with bare metal, virtualized and cloud
infrastructure
▸Easily patch, upgrade and maintain Linux servers
▸Automation can handle reboots and ad-hoc changes
Configuration Management
▸Built-in support for Linux file and user management
▸Full integration of Jinja2 templating library
▸Support for Idempotence across numerous Linux modules
Application Deployment
▸Full support of dnf, yum and apt packaging tools
▸Start, stop, and manage Linux services
▸Check operational state and verify application deployments

Cloud Network SecurityInfrastructureEdge
Application
Deployment
Configuration
management
Provisioning

59. CONFIDENTIAL designator Red Hat Ansible Automation Platform technical deck | Use cases
105
Ansible Automation Platform for Windows.
Day 1 configuration
▸Install and uninstall MSIs, .exes
▸Chocolatey package manager integration
▸Start, stop, and manage Windows services
▸Template and apply registry updates
▸Flexible authentication support
▸Manage and install Windows updates across reboots
▸Create and manage local users
▸Create and manage domain controller/member server state
▸Manage certificates
▸Fetch files from remote hosts
▸Push and execute Powershell scripts
▸Leverage Powershell DSC resources
Day 2 operations
Cloud Network SecurityInfrastructureEdge

60. Red Hat Ansible Automation Platform technical deck |
Use cases
107
GitOps. IaC, merge requests, and CI/CD.
Ansible Automation Platform and GitOps
▸GitOps is a framework that uses Git repositories as a single
source of truth (SoT) to deliver infrastructure as code.
▸Infrastructure as Code (IaC) is stored within a Git
repositor as the SoT.
▸Merge Requests (MRs) is the change mechanism for
any updates to the infrastructure.
▸Continuous Integration/Continuous Delivery (CI/CD)
automates the infrastructure updates.
▸Ansible triggers and automates the IaC updates via Ansible
workflows while acting as a CI/CD tool and providing complete
management of the entire lifecycle day-2 operations.
Cloud Network SecurityInfrastructureEdge

61. Red Hat Ansible Automation Platform technical deck |
Use cases
109
Event-Driven Ansible. Observe Evaluate Act
Remediation and Observation from events
▸Source plugins provide Event-Driven Ansible the ability to listen for
events which can be processed through rulebooks.
▸Rules in the form of Rulebooks allow us to create event conditions
which once met will trigger an action.
▸Actions give us the ability to trigger playbooks, modules,
notifications and further event triggers based on the conditions
that have been met by a specific event.
Rules Actions Event
sources
Event AutomationDecision
Developer Preview
Cloud Network SecurityInfrastructureEdge

62. CONFIDENTIAL designator
Advanced Scenario for Server Patch
start
Initiate
Patch
Workflow
VM
Snapshot
Stop target
services
Install Latest
updates via
CV
Application
Health
Check
Start target
services
finish
Installation
Fail
RHEL 7,8
Windows Server
vmware
vCenter

Microsoft
SCVMM
Target vm
Disk capacity
check
From ansible
controller
Input :
Target VM
Approval
Windows
system state
backup
Disable target
from Load
Balancer Pool
Force target to
cluster passive
node
Websphere
Infoscale
powerHA
Load
Balanced
target
Cluster
target
Enable target
from Load
Balancer Pool
Activate target
to cluster active
node
Restore
from
Backup
Load
Balanced
target
Cluster
target
Success
Request
credential
Delete
snapshot /
Backup
Required
target
credential
Application
Health
Check
finish
Fail
Delete
snapshot /
Backup

63. CONFIDENTIAL designator
Automation for Security Compliance
111
=
Install,
upgrade,
reconcile,
config
SummarizeObserve
2Automate scan for the profile
against server via ansible, collect
results, and (optionally)
performs remeditations
3Accreditors or Auditors can
examine the scan results for
compliance status, After
review, if desired,
remediations can be
automate applied by the
ansible playbook.
use Ansible
playbook to scan

1Select Compliance profile
Profiles
available
-- CIS
-- PCI-DSS
-- HIPAA
-- STIG DISA
-- NERC

64. CONFIDENTIAL designator
User Management
Get request
from the user
Open Ticket
Ticker Playbook
via Rest API
Reset Password
Add New Users
Delete Users

65. CONFIDENTIAL designator
Automation Deployment
113
A collection of supported Ansible roles that
ensure consistent workflows and streamline
the execution of manual tasks at scale.
▸Firewall
▸HA Cluster
▸Microsoft SQL with Away on
▸SAP HANA
▸Storage
▸IPMI Hardware Management Automation

RHEL System Roles

66. CONFIDENTIAL designator
Many Organizations’ DR Plan is Complex
●Many People
●Many Applications
●Many Infrastructure Elements
●Focus on Testing

67. INSERT CONFIDENTIAL designator
Automation and IT modernization
130
Red Hat named a Leader in The Forrester
Wave™
Infrastructure Automation Platforms, Q3 2020
▸“Ansible continues to grow quickly, particularly among
enterprises that are automating networks. The solution excels
at providing a variety of deployment options and acting as a
service broker to a wide array of other automation tools.”
▸“Red Hat’s solution is a good fit for customers that want a
holistic automation platform that integrates with a wide array of
other vendors’ infrastructure.”
Source:
Gardner, Chris, Glenn O'Donnell, Robert Perdonii, and Diane Lynch. "The Forrester Wave™: Infrastructure Automation Platforms, Q3 2020." Forrester, 10 Aug. 2020.
DISCLAIMER: The Forrester Wave™ is copyrighted by Forrester Research, Inc. Forrester and Forrester Wave™ are trademarks of Forrester Research, Inc. The Forrester Wave™ is a graphical representation of
Forrester’s call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester
Wave™. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change.
Received highest possible score in the criteria of:
●Deployment functionality
●Product Vision
●Partner Ecosystem
●Supporting products and services
●Community support
●Planned product enhancements

68. CONFIDENTIAL designator
http://bit.ly/AnsibleChannel

69. CONFIDENTIAL designator
Interactive Self Learning Labs
https://red.ht/3FY5l3f
Interactive Self Learning Labs

70. CONFIDENTIAL designator
RHCSA Rapid Track Course | 5 DaysRH199
Ansible for Network Automation | 5 DaysDO457
Red Hat Enterprise Linux Automation with Ansible | 4 DaysRH294
Red Hat Certified Engineer exam | EX294 ( 4 hours )RHCE
Pre-req Overview
Required
Course
Suggested
Exam
Ansible Learning Path Overview
DevOps Engineer
Network Administrator
Red Hat Certified Specialist in Ansible Network
Automation exam | 4 Hours
EX457
Developing Advanced Automation with Red Hat Ansible
Automation Platform | 4 Days
DO374
Red Hat Certified Specialist in Developing Automation
with Ansible Automation Platform exam | 4 hours
EX374
Managing Enterprise Automation with Red Hat Ansible
Automation Platform | 4 Days
DO467
Red Hat Certified Specialist in Managing Automation
with Ansible Automation Platform exam | 4 hours
EX467
Microsoft Windows Automation with Red Hat Ansible | 5 daysDO417
Windows Administrator

71. Thank you
linkedin.com/company/red-hat
youtube.com/user/RedHatVideos
facebook.com/RedHatAPAC
twitter.com/Red_Hat_APAC