alexpolo1
a3b8959ca9
Migrated from legacy playbook repo into Ansible collection format: Roles (171 total): - common: 44 roles (fact gathering, SSH setup, utilities) - configuration: 32 roles (system config, networking, satellite) - provisioning: 16 roles (VMware, Azure, physical server deployment) - security: 15 roles (OpenSCAP hardening, certificates, AD integration) - monitoring: 12 roles (Zabbix, logging agents, metrics) - networking: 12 roles (DNS, DHCP, network interfaces) - satellite: 4 roles (Pulp/Satellite management) - misc: 36 roles (various utilities) Playbooks (159 total): - provisioning: 14 playbooks - azure: 13 playbooks - configuration: 22 playbooks - maintenance: 10 playbooks - security: 10 playbooks - monitoring: 9 playbooks - vcenter: 6 playbooks - networking: 7 playbooks - misc: 65 playbooks
67 lines
1.3 KiB
YAML
67 lines
1.3 KiB
YAML
---
|
|
- hosts: all
|
|
gather_facts: False
|
|
connection: local
|
|
become: False
|
|
roles:
|
|
- set-physical-facts
|
|
|
|
|
|
- hosts: all
|
|
gather_facts: True
|
|
connection: local
|
|
become: False
|
|
serial: 1
|
|
roles:
|
|
- determine-jump-host
|
|
- clear-host-from-known-hosts
|
|
- create-dns-record
|
|
- create-ad-group
|
|
- add-users-to-ad-group
|
|
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- change-hostname
|
|
- enable-swappiness
|
|
- create-infra-user
|
|
- { role: subscription-manager-setup-rhel9, tags: subscription }
|
|
- install-microsoft-defender
|
|
- configure-fips-policies
|
|
- yum-update
|
|
- ntp-client-setup
|
|
- dnf-automatic
|
|
- ssh-deny-root
|
|
- zabbix-agent
|
|
- fix--audit-logs-in-message
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- install-openscap-requirements
|
|
- enforce-skat-openscap
|
|
- { role: enforce-cis-rhel9, when: ansible_distribution_major_version == '9' }
|
|
- realm-join-rhel9
|
|
|
|
|
|
- hosts: all
|
|
become: yes
|
|
become_method: sudo
|
|
roles:
|
|
- { role: realm-join-rhel9, tags: ad-join }
|
|
- configure-inspec-access
|
|
- configure-skat-certificate-trust
|
|
- bmc-discovery
|
|
|
|
|
|
- hosts: all
|
|
gather_facts: false
|
|
become: yes
|
|
tasks:
|
|
- name: reboot | any/all systems but not sequenced
|
|
reboot:
|
|
reboot_timeout: 600
|