Initial collection structure
Migrated from legacy playbook repo into Ansible collection format: Roles (171 total): - common: 44 roles (fact gathering, SSH setup, utilities) - configuration: 32 roles (system config, networking, satellite) - provisioning: 16 roles (VMware, Azure, physical server deployment) - security: 15 roles (OpenSCAP hardening, certificates, AD integration) - monitoring: 12 roles (Zabbix, logging agents, metrics) - networking: 12 roles (DNS, DHCP, network interfaces) - satellite: 4 roles (Pulp/Satellite management) - misc: 36 roles (various utilities) Playbooks (159 total): - provisioning: 14 playbooks - azure: 13 playbooks - configuration: 22 playbooks - maintenance: 10 playbooks - security: 10 playbooks - monitoring: 9 playbooks - vcenter: 6 playbooks - networking: 7 playbooks - misc: 65 playbooks
This commit is contained in:
71
README.md
Normal file
71
README.md
Normal file
@@ -0,0 +1,71 @@
|
||||
# Ansible Infrastructure Collection
|
||||
|
||||
A comprehensive Ansible collection for managing hybrid cloud infrastructure including Azure, VMware on-premise environments, and Red Hat Enterprise Linux systems.
|
||||
|
||||
## Features
|
||||
|
||||
- **Provisioning**: VM deployment across Azure, VMware ESXi/vCenter, physical servers
|
||||
- **Configuration**: System hardening (OpenSCAP/CIS), networking, monitoring setup
|
||||
- **Monitoring**: Zabbix agent/proxy installation, log forwarding (Fluentd/Filebeat)
|
||||
- **Security**: Certificate management, AD integration, password rotation
|
||||
- **Satellite**: Pulp/Satellite subscription management and content views
|
||||
- **Networking**: DHCP reservations, DNS records, network interface configuration
|
||||
|
||||
## Installation
|
||||
|
||||
```bash
|
||||
ansible-galaxy install ansible.infrastructure
|
||||
# or from source:
|
||||
cd ansible-infrastructure-collection
|
||||
git clone https://github.com/yourorg/ansible-infrastructure.git
|
||||
cd ansible-infrastructure
|
||||
make build
|
||||
ansible-galaxy install dist/*.tar.gz
|
||||
```
|
||||
|
||||
## Usage
|
||||
|
||||
### Provision a RHEL9 VM in VMware
|
||||
|
||||
```yaml
|
||||
---
|
||||
- hosts: target_host
|
||||
vars_files:
|
||||
- vault.yml
|
||||
roles:
|
||||
- ansible.infrastructure.provision_vmware_rhel9
|
||||
- ansible.infrastructure.configure_networking
|
||||
- ansible.infrastructure.install_monitoring
|
||||
```
|
||||
|
||||
### Configure OpenSCAP Hardening
|
||||
|
||||
```yaml
|
||||
---
|
||||
- hosts: all
|
||||
roles:
|
||||
- role: ansible.infrastructure.enforce_openscap
|
||||
openscap_profile: "xccdf_org.ssgproject.content_profile_cis_workstation"
|
||||
```
|
||||
|
||||
## Role Categories
|
||||
|
||||
| Category | Description |
|
||||
|----------|-------------|
|
||||
| common | Shared utilities (fact gathering, SSH key setup) |
|
||||
| provisioning | VM deployment for various platforms |
|
||||
| configuration | System configuration and tuning |
|
||||
| security | Security hardening and certificates |
|
||||
| monitoring | Zabbix, logging agents, metrics collection |
|
||||
| networking | DNS, DHCP, network interfaces |
|
||||
| satellite | Pulp/Satellite integration |
|
||||
| misc | Miscellaneous tasks |
|
||||
|
||||
## Requirements
|
||||
|
||||
- Ansible >= 2.9
|
||||
- Required collections: microsoft.ad, community.general, azure_rm, vmware.vmware
|
||||
|
||||
## License
|
||||
|
||||
Apache-2.0
|
||||
Reference in New Issue
Block a user