alexpolo1
a3b8959ca9
Migrated from legacy playbook repo into Ansible collection format: Roles (171 total): - common: 44 roles (fact gathering, SSH setup, utilities) - configuration: 32 roles (system config, networking, satellite) - provisioning: 16 roles (VMware, Azure, physical server deployment) - security: 15 roles (OpenSCAP hardening, certificates, AD integration) - monitoring: 12 roles (Zabbix, logging agents, metrics) - networking: 12 roles (DNS, DHCP, network interfaces) - satellite: 4 roles (Pulp/Satellite management) - misc: 36 roles (various utilities) Playbooks (159 total): - provisioning: 14 playbooks - azure: 13 playbooks - configuration: 22 playbooks - maintenance: 10 playbooks - security: 10 playbooks - monitoring: 9 playbooks - vcenter: 6 playbooks - networking: 7 playbooks - misc: 65 playbooks
107 lines
2.6 KiB
YAML
107 lines
2.6 KiB
YAML
---
|
|
- name: Vmware create vm
|
|
hosts: all
|
|
gather_facts: false
|
|
connection: local
|
|
become: false
|
|
serial: 1
|
|
roles:
|
|
- set-vxrail-rhel9-facts
|
|
- {role: vxrail-provision, when: (provision is undefined or provision == true)}
|
|
- {role: vmware-data-disk, when: (provision is undefined or provision == true)}
|
|
- {role: vxrail-storage-policy, when: (provision is undefined or provision == true)}
|
|
- {role: vmware-connected-network, when: (provision is undefined or provision == true)}
|
|
- {role: vmware-get-mac, when: (provision is undefined or provision == true)}
|
|
- {role: vmware-disconnected-network, when: (provision is undefined or provision == true)}
|
|
|
|
|
|
- name: Vmware set hostname
|
|
hosts: all
|
|
gather_facts: true
|
|
connection: local
|
|
become: false
|
|
serial: 1
|
|
roles:
|
|
- {role: vmware-set-hostname, when: (provision is undefined or provision == true)}
|
|
|
|
- name: Vmware set tags
|
|
hosts: all
|
|
gather_facts: false
|
|
connection: local
|
|
become: false
|
|
serial: 1
|
|
roles:
|
|
- {role: vxrail-set-tags, when: (provision is undefined or provision == true)}
|
|
|
|
- name: Create dns dhcp and windows groups
|
|
hosts: all
|
|
gather_facts: true
|
|
connection: local
|
|
become: false
|
|
serial: 1
|
|
roles:
|
|
- {role: vmware-get-ip, when: ip is not defined}
|
|
- determine-jump-host
|
|
- clear-host-from-known-hosts
|
|
- create-dns-record
|
|
- create-ad-group
|
|
- add-users-to-ad-group
|
|
|
|
- name: Vmware network card
|
|
hosts: all
|
|
become: true
|
|
become_method: sudo
|
|
gather_facts: false
|
|
serial: 1
|
|
roles:
|
|
- {role: vmware-auto-nic, when: (provision is undefined or provision == true)}
|
|
|
|
- name: Provision part 1
|
|
hosts: all
|
|
become: true
|
|
become_method: sudo
|
|
roles:
|
|
- change-hostname
|
|
- enable-swappiness
|
|
- create-infra-user
|
|
- { role: subscription-manager-setup-rhel9, tags: subscription }
|
|
- install-microsoft-defender
|
|
- configure-fips-policies
|
|
- yum-update
|
|
- ntp-client-setup
|
|
- dnf-automatic
|
|
- ssh-deny-root
|
|
- zabbix-agent
|
|
- fix--audit-logs-in-message
|
|
|
|
- name: Provision part 2
|
|
hosts: all
|
|
become: true
|
|
become_method: sudo
|
|
roles:
|
|
- install-openscap-requirements
|
|
- enforce-skat-openscap
|
|
- upload-skat-openscap
|
|
- { role: enforce-cis-rhel9, when: ansible_distribution_major_version == '9' }
|
|
- realm-join-rhel9
|
|
|
|
|
|
- name: Provision part 3
|
|
hosts: all
|
|
become: true
|
|
become_method: sudo
|
|
roles:
|
|
- configure-inspec-access
|
|
- configure-skat-certificate-trust
|
|
- bmc-discovery
|
|
|
|
|
|
- name: Reboot server
|
|
hosts: all
|
|
gather_facts: false
|
|
become: true
|
|
tasks:
|
|
- name: reboot | any/all systems but not sequenced
|
|
reboot:
|
|
reboot_timeout: 600
|