alexpolo1
a3b8959ca9
Migrated from legacy playbook repo into Ansible collection format: Roles (171 total): - common: 44 roles (fact gathering, SSH setup, utilities) - configuration: 32 roles (system config, networking, satellite) - provisioning: 16 roles (VMware, Azure, physical server deployment) - security: 15 roles (OpenSCAP hardening, certificates, AD integration) - monitoring: 12 roles (Zabbix, logging agents, metrics) - networking: 12 roles (DNS, DHCP, network interfaces) - satellite: 4 roles (Pulp/Satellite management) - misc: 36 roles (various utilities) Playbooks (159 total): - provisioning: 14 playbooks - azure: 13 playbooks - configuration: 22 playbooks - maintenance: 10 playbooks - security: 10 playbooks - monitoring: 9 playbooks - vcenter: 6 playbooks - networking: 7 playbooks - misc: 65 playbooks
69 lines
2.0 KiB
YAML
69 lines
2.0 KiB
YAML
---
|
|
- hosts: all
|
|
gather_facts: False
|
|
connection: local
|
|
become: False
|
|
roles:
|
|
- set-azure-facts
|
|
- { role: azure-create-asg, when: (provision is undefined or provision == True) and project_asg is defined }
|
|
- { role: azure-create-network-interface, when: (provision is undefined or provision == True) }
|
|
- { role: azure-provision, when: (provision is undefined or provision == True) }
|
|
- { role: azure-add-disk, when: data_vgs is defined and (provision is undefined or provision == True) }
|
|
|
|
- hosts: all
|
|
gather_facts: True
|
|
connection: local
|
|
become: False
|
|
serial: 1
|
|
roles:
|
|
- { role: azure-get-ip, when: ip is not defined }
|
|
- determine-jump-host
|
|
- create-dns-record
|
|
- check-dns-name
|
|
- create-ad-group
|
|
- add-users-to-ad-group
|
|
- azure-compare-ip
|
|
- clear-host-from-known-hosts
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- validate-ip
|
|
- change-hostname
|
|
- enable-swappiness
|
|
- azure-disable-omid-cron
|
|
- remove-releasever
|
|
- { role: subscription-manager-setup-azure, tags: subscription }
|
|
- { role: realm-join, tags: ad-join }
|
|
- { role: azure-configure-disk, when: data_vgs is defined }
|
|
- { role: add-sudoers-group, when: group_name is defined }
|
|
- { role: add-allowed-group, when: group_name is defined }
|
|
- configure-inspec-access
|
|
- install-useful-stuff
|
|
- install-microsoft-defender
|
|
- configure-skat-certificate-trust
|
|
- yum-update
|
|
- ntp-client-setup
|
|
- ssh-deny-root
|
|
- bmc-discovery
|
|
- zabbix-agent
|
|
- fix--audit-logs-in-message
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- install-openscap-requirements
|
|
- { role: enforce-skat-openscap, when: ansible_distribution_major_version == '9' }
|
|
- upload-skat-openscap
|
|
- { role: enforce-cis-rhel9, when: ansible_distribution_major_version == '9' }
|
|
|
|
- hosts: all
|
|
gather_facts: false
|
|
become: yes
|
|
tasks:
|
|
- name: reboot | any/all systems but not sequenced
|
|
reboot:
|
|
reboot_timeout: 600
|