Learn ansible : automate cloud, security, and network infrastructure using ansible 2.x / Russ McKendrick.

Format:

Book

Author/Creator:

McKendrick, Russ, author.

Language:

English

Subjects (All):

Automation--Data processing.

Automation.

Ansible (Computer program language).

Physical Description:

1 online resource (558 pages)

Edition:

1st edition

Place of Publication:

Birmingham, London ; Mumbai : Packt, 2018.

System Details:

Mode of access: World Wide Web.

text file

Biography/History:

McKendrick Russ: Russ McKendrick is an experienced DevOps practitioner and system administrator with a passion for automation and containers. He has been working in IT and related industries for the better part of 30 years. During his career, he has had responsibilities in many different sectors, including first-line, second-line, and senior support in client-facing and internal teams for small and large organizations. He works almost exclusively with Linux, using open source systems and tools across dedicated hardware and virtual machines hosted in public and private clouds at Node4, where he holds the title of practice manager (SRE and DevOps). He also buys way too many records!

Summary:

Run Ansible playbooks to launch complex multi-tier applications hosted in public clouds About This Book Build your learning curve using Ansible Automate cloud, network, and security infrastructures with ease Gain hands-on exposure on Ansible Who This Book Is For Learn Ansible is perfect for system administrators and developers who want to take their current workflows and transform them into repeatable playbooks using Ansible. No prior knowledge of Ansible is required. What You Will Learn Write your own playbooks to configure servers running CentOS, Ubuntu, and Windows Identify repeatable tasks and write playbooks to automate them Define a highly available public cloud infrastructure in code, making it easy to distribute your infrastructure configuration Deploy and configure Ansible Tower and Ansible AWX Learn to use community contributed roles Use Ansible in your day-to-day role and projects In Detail Ansible has grown from a small, open source orchestration tool to a full-blown orchestration and configuration management tool owned by Red Hat. Its powerful core modules cover a wide range of infrastructures, including on-premises systems and public clouds, operating systems, devices, and services—meaning it can be used to manage pretty much your entire end-to-end environment. Trends and surveys say that Ansible is the first choice of tool among system administrators as it is so easy to use. This end-to-end, practical guide will take you on a learning curve from beginner to pro. You'll start by installing and configuring the Ansible to perform various automation tasks. Then, we'll dive deep into the various facets of infrastructure, such as cloud, compute and network infrastructure along with security. By the end of this book, you'll have an end-to-end understanding of Ansible and how you can apply it to your own environments. Style and approach A hands-on approach to give you practical experience of writing playbooks and roles and executing them. At the end of each chapter, you'll find test questions to test your knowledge on Ansible. Downloading the example code for this book You can download the example code files for all Packt books you have purchased from your account at http://www.PacktPub.com. If you purchased this book elsewhere, you can visit http://www.PacktPub.com/support and register to have the files e-mailed directly to you.

Contents:

Cover

Title Page

Copyright and Credits

Packt Upsell

Contributors

Table of Contents

Preface

Chapter 1: An Introduction to Ansible

Ansible's story

The term

The software

Ansible versus other tools

Declarative versus imperative

Configuration versus orchestration

Infrastructure as code

Summary

Further reading

Chapter 2: Installing and Running Ansible

Technical requirements

Installing Ansible

Installing on macOS

Homebrew

The pip method

Pros and cons

Installing on Linux

Installing on Windows 10 Professional

Launching a virtual machine

An introduction to playbooks

Host inventories

Playbooks

Questions

Chapter 3: The Ansible Commands

Inbuilt commands

Ansible

The ansible-config command

The ansible-console command

The ansible-doc command

The ansible-inventory command

Ansible Vault

Third-party commands

The ansible-inventory-grapher command

Ansible Run Analysis

Chapter 4: Deploying a LAMP Stack

Playbook structure

LAMP stack

Common

Updating packages

Installing common packages

Configuring NTP

Creating a user

Running the role

Apache

Installing Apache

Configuring Apache

Configuring SELinux

Copying an HTML file

MariaDB

Installing MariaDB

Configuring MariaDB

Importing a sample database

PHP

Installing PHP

The phpinfo file

Adminer

Overriding variables

Chapter 5: Deploying WordPress

Preinstallation tasks

The stack-install command

Enabling the repositories

Installing the packages

The stack-config role.

WordPress system user

NGINX configuration

PHP and PHP-FPM configuration

Starting NGINX and PHP-FPM

MariaDB Configuration

SELinux configuration

WordPress installation tasks

WordPress CLI installation

Creating the WordPress database

Downloading, configuring, and installing WordPress

WordPress plugins and theme installation

Running the WordPress playbook

Chapter 6: Targeting Multiple Distributions

Launching multiple Vagrant boxes

Multi-operating system considerations

Adapting the roles

Operating system family

The stack-install role

The stack-config role

The wordpress role

Running the playbook

Chapter 7: The Core Network Modules

Manufacturer and device support

The modules

A10 Networks

Cisco Application Centric Infrastructure (ACI)

Cisco AireOS

Apstra Operating System (AOS)

Aruba Mobility Controller

Cisco Adaptive Security Appliance (ASA)

Avi Networks

Big Switch Networks

Citrix Netscaler

Huawei CloudEngine (CE)

Arista CloudVision (CV)

Lenovo CNOS

Cumulus Linux (CL)

Dell operating system 10 (DellOS10)

Ubiquiti EdgeOS

Lenovo Enterprise Networking Operating System (ENOS)

Arista EOS

F5 BIG-IP

FortiGate FortiManager

FortiGate FortiOS

illumos

Cisco IOS and IOS XR

Brocade IronWare

Juniper Junos

Nokia NetAct

Pluribus Networks Netvisor OS

Cisco Network Services Orchestrator (NSO)

Nokia Nuage Networks Virtualized Services Platform (VSP)

Cisco NX-OS (NXOS)

Mellanox ONYX

Ordnance

Open vSwitch (OVS)

Palo Alto Networks PAN-OS

Radware

Nokia Networks Service Router Operating System (SROS)

VyOS

System

Interacting with a network device.

Launching the network device

The VyOS role

Chapter 8: Moving to the Cloud

Interacting with DigitalOcean

Generating a personal access token

Installing dopy

Launching a Droplet

WordPress on DigitalOcean

The host inventory

Variables

The playbook

The droplet role

Chapter 9: Building Out a Cloud Network

An introduction to AWS

Amazon Virtual Private Cloud overview

Creating an access key and secret

The VPC playbook

The VPC role

The subnets role

The internet gateway role

The security group role

The ELB role

Chapter 10: Highly Available Cloud Deployments

Planning the deployment

Costing the deployment

WordPress considerations and high availability

Amazon VPC

Amazon RDS

Amazon EFS

Testing the playbook

Terminating resources

EC2 instances

Instance discovery

New deployment

Existing deployment

Stack

Default variables

Deploy

WordPress

AMI

Autoscaling

Terminating all the resources

Chapter 11: Building Out a VMware Deployment

An introduction to VMware

The VMware modules

Requirements

vCloud Air

The vca_fw module

The vca_nat module

The vca_vapp module

VMware vSphere

The vmware_cluster module

The vmware_datacenter module

The vmware_vm_facts module

The vmware_vm_shell module

The vmware_vm_vm_drs_rule module

The vmware_vm_vss_dvs_migrate module

The vsphere_copy module

The vsphere_guest module

VMware vCentre.

The vcenter_folder module

The vcenter_license module

The vmware_guest module

The vmware_guest_facts module

The vmware_guest_file_operation module

The vmware_guest_find module

The vmware_guest_powerstate module

The vmware_guest_snapshot module

The vmware_guest_tools_wait module

VMware ESXi

The vmware_dns_config module

The vmware_host_dns_facts module

The vmware_host module

The vmware_host_facts module

The vmware_host_acceptance module

The vmware_host_config_manager module

The vmware_host_datastore module

The vmware_host_firewall_manager module

The vmware_host_firewall_facts module

The vmware_host_lockdown module

The vmware_host_ntp module

The vmware_host_package_facts module

The vmware_host_service_manager module

The vmware_host_service_facts module

The vmware_datastore_facts module

The vmware_host_vmnic_facts module

The vmware_local_role_manager module

The vmware_local_user_manager module

The vmware_cfg_backup module

The vmware_vmkernel module

The vmware_vmkernel_facts module

The vmware_target_canonical_facts module

The vmware_vmotion module

The vmware_vsan_cluster module

The vmware_vswitch module

The vmware_drs_rule_facts module

The vmware_dvswitch module

The vmware_dvs_host module

The vmware_dvs_portgroup module

The vmware_maintenancemode module

The vmware_portgroup module

The vmware_resource_pool module

An example playbook

Chapter 12: Ansible Windows Modules

Up-and-running

Vagrantfile

Ansible preparation

The ping module

The setup module

Installing a web server

IIS role

ASP.NET role

Interacting with AWS Windows instances

AWS role

User role

Chocolatey role

Information role

Summary.

Questions

Chapter 13: Hardening Your Servers Using Ansible and OpenSCAP

OpenSCAP

Preparing the host

Install role

Scan role

Running the initial scan

Generating the remediation Ansible playbook

Generating the remediation bash script

Running a standalone scan

Fixing the remaining failed checks

Destroying the Vagrant box

Chapter 14: Deploying WPScan and OWASP ZAP

Preparing the boxes

The WordPress playbook

The scan playbook

The Docker role

The WPScan role

Running a WPScan

The OWASP ZAP role

Running OWASP ZAP

Chapter 15: Introducing Ansible Tower and Ansible AWX

Web-based Ansible

Ansible Tower

Updating the inventory file

Requesting a license

The hello world demo project

Launching the AWS playbook

Adding a new project

Adding credentials

Adding an inventory

Adding the templates

Removing the cluster

Tower summary

Ansible AWX

Preparing the playbook

The docker role

The awx role

Using Ansible AWX

AWX summary

Chapter 16: Ansible Galaxy

Introduction to Ansible Galaxy

Jenkins playbook

Publishing a role

Creating the docker role

Tasks

Metadata

README

Committing the code and publishing

Testing the role

Ansible Galaxy commands

Logging in

Importing

Searching

Info

Chapter 17: Next Steps with Ansible

Integrating with third-party services

Slack

Generating a token

The Ansible playbook

Running the playbook.

Other services.

Notes:

Includes bibliographical references.

Description based on print version record.

ISBN:

9781788999328

1788999320

OCLC:

1043624708