Day 69 - All other things Ansible

OneThousandDong · Mar 10, 2022 · 712f453 · 712f453
1 parent 49e69dd
commit 712f453
Show file tree

Hide file tree

Showing 15 changed files with 149 additions and 6 deletions.
diff --git a/Days/Configmgmt/ansible-scenario7/roles/mysql/tasks/setup_mysql.yml b/Days/Configmgmt/ansible-scenario7/roles/mysql/tasks/setup_mysql.yml
@@ -18,4 +18,13 @@
     login_user: "{{ db_user }}" 
     login_password: "{{ db_pass }}"     
     name: "{{ db_name }}"
-    state: present
+    state: present
+
+- name: Enable remote login to mysql
+  lineinfile:
+    path: /etc/mysql/mysql.conf.d/mysqld.cnf
+    regexp: '^bind-address'
+    line: 'bind-address = 0.0.0.0'
+    backup: yes
+  notify:
+      - Restart mysql
diff --git a/Days/Images/Day69_config1.png b/Days/Images/Day69_config1.png
diff --git a/Days/Images/Day69_config10.png b/Days/Images/Day69_config10.png
diff --git a/Days/Images/Day69_config2.png b/Days/Images/Day69_config2.png
diff --git a/Days/Images/Day69_config3.png b/Days/Images/Day69_config3.png
diff --git a/Days/Images/Day69_config4.png b/Days/Images/Day69_config4.png
diff --git a/Days/Images/Day69_config5.png b/Days/Images/Day69_config5.png
diff --git a/Days/Images/Day69_config6.png b/Days/Images/Day69_config6.png
diff --git a/Days/Images/Day69_config7.png b/Days/Images/Day69_config7.png
diff --git a/Days/Images/Day69_config8.png b/Days/Images/Day69_config8.png
diff --git a/Days/Images/Day69_config9.png b/Days/Images/Day69_config9.png
diff --git a/Days/Images/Screenshot from 2022-02-28 21-03-27.png b/Days/Images/Screenshot from 2022-02-28 21-03-27.png
diff --git a/Days/day69.md b/Days/day69.md
@@ -1,5 +1,133 @@
+## All other things Ansible - Automation Controller (Tower), AWX, Vault
 
+Rounding out the section on Configuration Management I wanted to have a look into the other areas that you might come across when dealing with Ansible.  
 
-Ansible Vault 
-Ansible Tower 
-Ansible AWX 
+There are a lot of products that make up the Ansible Automation platform. 
+
+Red Hat Ansible Automation Platform is a foundation for building and operating automation across an organization. The platform includes all the tools needed to implement enterprise-wide automation.
+
+![](Images/Day69_config1.png)
+
+I will try and cover some of these in this post. But for more information then the official Red Hat Ansible site is going to have lots more information. [Ansible.com](https://www.ansible.com/?hsLang=en-us)
+
+### Ansible Automation Controller | AWX 
+
+I have bundled these two together because the Automation Controller and AWX are very similar in what they offer. 
+
+The AWX project or AWX for short is an open-source community project, sponsored by Red Hat that enables you to better control your Ansible projects within your environments. AWX is the upstream project from which the automation controller component is derived. 
+
+If you are looking for an enterprise solution then you will be looking for the Automation Controller or you might have previously heard this as Ansible Tower. The Ansible Automation Controller is the control plane for the Ansible Automation Platform. 
+
+Both AWX and the Automation Controller bring the following features above everything else we have covered in this section thus far. 
+
+- User Interface 
+- Role Based Access Control 
+- Workflows 
+- CI/CD integration 
+
+The Automation Controller is the enterprise offering where you pay for your support. 
+
+We are going to take a look at deploying AWX within our minikube Kubernetes environment. 
+
+### Deploying Ansible AWX 
+
+AWX does not need to be deployed to a Kubernetes cluster, the [github](https://github.com/ansible/awx) for AWX from ansible will give you that detail. However starting in version 18.0, the AWX Operator is the preferred way to install AWX. 
+
+First of all we need a minikube cluster. We can do this if you followed along during the Kubernetes section by creating a new minikube cluster with the `minikube start --cpus=4 --memory=6g --addons=ingress` command. 
+
+![](Images/Day69_config2.png)
+
+The official [Ansible AWX Operator](https://github.com/ansible/awx-operator) can be found here. As stated in the install instructions you should clone this repository and then run through the deployment. 
+
+I forked the repo above and then ran `git clone https://github.com/MichaelCade/awx-operator.git` my advice is you do the same and do not use my repository as I might change things or it might not be there. 
+
+In the cloned repository you will find a awx-demo.yml file we need to change `NodePort` for `ClusterIP` as per below: 
+
+```
+---
+apiVersion: awx.ansible.com/v1beta1
+kind: AWX
+metadata:
+  name: awx-demo
+spec:
+  service_type: ClusterIP
+```
+
+The next step is to define our namespace where we will be deploying the awx operator, using the `export NAMESPACE=awx` command then followed by `make deploy` we will start the deployment. 
+
+![](Images/Day69_config3.png)
+
+In checking we have our new namespace and we have our awx-operator-controller pod running in our namespace. `kubectl get pods -n awx`
+
+![](Images/Day69_config4.png)
+
+Within the cloned repository you will find a file called awx-demo.yml we now want to deploy this into our Kubernetes cluser and our awx namespace. `kubectl create -f awx-demo.yml -n awx`
+
+![](Images/Day69_config5.png)
+
+You can keep an eye on the progress with `kubectl get pods -n awx -w` which will keep a visual watch on what is happening. 
+
+You should have something that resembles the image you see below when everything is running. 
+
+![](Images/Day69_config6.png)
+
+Now we should be able to access our awx deployment after running in a new terminal `minikube service awx-demo-service --url -n $NAMESPACE` to expose this through the minikube ingress. 
+
+![](Images/Day69_config7.png)
+
+If we then open a browser to that address [] you can see we are prompted for username and password. 
+
+![](Images/Day69_config8.png)
+
+The username by default is admin, to get the password we can run the following command to get this `kubectl get secret awx-demo-admin-password -o jsonpath="{.data.password}" -n awx| base64 --decode`
+
+![](Images/Day69_config9.png)
+
+Obviously this then gives you a UI to manage your playbook and configuration management tasks in a centralised location, it also allows you as a team to work together vs what we have been doing so far here where we have been running from one ansible control station. 
+
+This is another one of those areas where you could probably go and spend another length of time walking through the capabilities within this tool. 
+
+I will call out a great resource from Jeff Geerling, which goes into more detail on using Ansible AWX. [Ansible 101 - Episode 10 - Ansible Tower and AWX](https://www.youtube.com/watch?v=iKmY4jEiy_A&t=752s) 
+
+In this video he also goes into great detail on the differences between Automation Controller (Previously Ansible Tower) and Ansible AWX (Free and Open Source).
+
+### Ansible Vault 
+
+`ansible-vault` allows us to encrypt and decrypt Ansible data files. Throughout this section we have skipped over and we have put some of our sensitive information in plain text. 
+
+Built in to the Ansible binary is `ansible-vault` which allows us to mask away this sensitive information. 
+
+![](Images/Day69_config10.png)
+
+Secrets Management has progressively become another area in which more time should have been spent alongside tools such as HashiCorp Vault or the AWS Key Management Service. I will mark this as an area to dive deeper into.
+
+I am going to link a great resource and demo to run through from Jeff Geerling again [Ansible 101 - Episode 6 - Ansible Vault and Roles](https://www.youtube.com/watch?v=JFweg2dUvqM)
+
+### Ansible Galaxy (Docs)
+
+Now, we have already used `ansible-galaxy` to create some of our roles and file structure for our demo project. But we also have [Ansible Galaxy documentation](https://galaxy.ansible.com/docs/)
+
+"Galaxy is a hub for finding and sharing Ansible content."
+
+### Ansible Testing
+
+- [Ansible Molecule](https://molecule.readthedocs.io/en/latest/) - Molecule project is designed to aid in the development and testing of Ansible roles
+
+- [Ansible Lint](https://ansible-lint.readthedocs.io/en/latest/) - CLI tool for linting playbooks, roles and collections
+
+### Other Resource 
+
+- [Ansible Documentation](https://docs.ansible.com/ansible/latest/index.html)
+
+## Resources 
+
+- [What is Ansible](https://www.youtube.com/watch?v=1id6ERvfozo)
+- [Ansible 101 - Episode 1 - Introduction to Ansible](https://www.youtube.com/watch?v=goclfp6a2IQ)
+- [NetworkChuck - You need to learn Ansible right now!](https://www.youtube.com/watch?v=5hycyr-8EKs&t=955s)
+- [Your complete guide to Ansible](https://www.youtube.com/playlist?list=PLnFWJCugpwfzTlIJ-JtuATD2MBBD7_m3u)
+
+This final playlist listed above is where a lot of the code and ideas came from for this section, a great resource and walkthrough in video format. 
+
+This post wraps up our look into configuration management, we next move into CI/CD Pipelines and some of the tools and processes that we might see and use out there to achieve this workflow for our application development and release. 
+
+See you on [Day 70](day70.md)
diff --git a/Days/day70.md b/Days/day70.md
@@ -0,0 +1,6 @@
+## The Big Picture: CI/CD Pipelines
+
+A CI/CD (Continous Integration/Continous Deployment) Pipeline implementation is the backbone of the modern DevOps environment. 
+
+It bridges the gap between development and operations by automating the build, test and deployment of applications. 
+
diff --git a/README.md b/README.md
@@ -108,11 +108,11 @@ This will not cover all things DevOps but it will cover the areas that I feel wi
 - [✔️] 📜 66 > [Ansible Playbooks Continued...](Days/day66.md)
 - [✔️] 📜 67 > [Using Roles & Deploying a Loadbalancer](Days/day67.md)
 - [✔️] 📜 68 > [Tags, Variables, Inventory & Database Server config](Days/day68.md)
-- [🚧] 📜 69 > [](Days/day69.md)
+- [✔️] 📜 69 > [All other things Ansible - Automation Controller, AWX, Vault](Days/day69.md)
 
 ### Create CI/CD Pipelines 
 
-- [] 🔄 70 > [The Big Picture: CI/CD Pipelines](Days/day70.md)
+- [🚧] 🔄 70 > [The Big Picture: CI/CD Pipelines](Days/day70.md)
 - [] 🔄 71 > [GitHub Actions Overview](Days/day71.md)
 - [] 🔄 72 > [](Days/day72.md)
 - [] 🔄 73 > [](Days/day73.md)