alexpolo1
a3b8959ca9
Migrated from legacy playbook repo into Ansible collection format: Roles (171 total): - common: 44 roles (fact gathering, SSH setup, utilities) - configuration: 32 roles (system config, networking, satellite) - provisioning: 16 roles (VMware, Azure, physical server deployment) - security: 15 roles (OpenSCAP hardening, certificates, AD integration) - monitoring: 12 roles (Zabbix, logging agents, metrics) - networking: 12 roles (DNS, DHCP, network interfaces) - satellite: 4 roles (Pulp/Satellite management) - misc: 36 roles (various utilities) Playbooks (159 total): - provisioning: 14 playbooks - azure: 13 playbooks - configuration: 22 playbooks - maintenance: 10 playbooks - security: 10 playbooks - monitoring: 9 playbooks - vcenter: 6 playbooks - networking: 7 playbooks - misc: 65 playbooks
72 lines
2.0 KiB
YAML
72 lines
2.0 KiB
YAML
---
|
|
- hosts: all
|
|
gather_facts: False
|
|
connection: local
|
|
become: False
|
|
roles:
|
|
- set-onprem-facts
|
|
- { role: vmware-provision, when: (provision is undefined or provision == True) }
|
|
- { role: vmware-set-ip, when: ip is defined and (provision is undefined or provision == True) }
|
|
|
|
- hosts: all
|
|
gather_facts: True
|
|
connection: local
|
|
become: False
|
|
serial: 1
|
|
roles:
|
|
- { role: vmware-get-ip, when: ip is not defined }
|
|
- determine-jump-host
|
|
- create-dns-record
|
|
- check-dns-name
|
|
- vmware-compare-ip
|
|
- clear-host-from-known-hosts
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- validate-ip
|
|
- change-hostname
|
|
- enable-swappiness
|
|
- { role: subscription-manager-setup, tags: subscription }
|
|
- { role: realm-join, tags: ad-join }
|
|
- { role: add-sudoers-group, when: group_name is defined }
|
|
- { role: add-allowed-group, when: group_name is defined }
|
|
- configure-inspec-access
|
|
- create-infra-user
|
|
- install-useful-stuff
|
|
- install-microsoft-defender
|
|
- configure-skat-certificate-trust
|
|
- yum-update
|
|
- ntp-client-setup
|
|
- { role: dnf-automatic, when: ansible_distribution_major_version == '8' }
|
|
- { role: yum-cron-update, when: configure_yum_cron|default(true)|bool and ansible_distribution_major_version == '7' }
|
|
- ssh-deny-root
|
|
- zabbix-agent
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- install-openscap-requirements
|
|
- enforce-skat-openscap
|
|
- upload-skat-openscap
|
|
- { role: enforce-cis-rhel7, when: ansible_distribution_major_version == '7' }
|
|
- { role: enforce-cis-rhel8, when: ansible_distribution_major_version == '8' }
|
|
|
|
- hosts: all
|
|
gather_facts: no
|
|
roles:
|
|
- { role: satellite-create-cli-config, when: hammer_time == True }
|
|
- { role: satellite-set-host-group, when: hammer_time == True }
|
|
- { role: satellite-delete-cli-config, when: hammer_time == True }
|
|
|
|
- hosts: all
|
|
gather_facts: false
|
|
become: yes
|
|
tasks:
|
|
- name: reboot | any/all systems but not sequenced
|
|
reboot:
|
|
reboot_timeout: 600
|
|
|