Why Automation and how Ansible Tower can help

Peter Mumenthaler - Solution Architect Some Questions you need to ask?

2 Some Questions you need to ask yourself?

3 AUTOMATE REPEAT IT

4 With Automation everything is...

● Documented ● Reporting ● Always ● Standard(s) procedures ● You know the state of all your IT env ● Easy to integrate into ● State is always enforced changemangement process ● Auditable ● Fast and close to production ● Traceable changes ● Abstraction of infrastructure ● Compliance ● Less errors because standardized environment and unit tests ● Reproducible ● IT staff spends their time on valuable things that engage their abilities

5 AUTOMATION FOR TEAMS Ansible Tower technical introduction and overview

6 WHAT IS ANSIBLE TOWER?

Ansible Tower is an enterprise framework for controlling, securing and managing your Ansible automation – with a UI and RESTful API.

• Role-based access control

• Deploy entire applications with push-button deployment access

• All automations are centrally logged

7 ANSIBLE TOWER Scale + operationalize your automation

CONTROL KNOWLEDGE DELEGATION

RED HAT ANSIBLE ENGINE Support for your Ansible automation

SIMPLE POWERFUL AGENTLESS

FUELED BY AN INNOVATIVE OPEN SOURCE COMMUNITY

8 …. ANSIBLE CLI & CI SYSTEMS ANSIBLE PLAYBOOKS ADMINS ROLE-BASED KNOWLEDGE SCHEDULED & ANSIBLE ACCESS CONTROL & VISIBILITY CENTRALIZED JOBS TOWER SIMPLE USER INTERFACE TOWER API USERS

OPEN SOURCE MODULE LIBRARY ANSIBLE PLUGINS PYTHON CODEBASE

TRANSPORT

SSH, WINRM, ETC.

INFRASTRUCTURE NETWORKS CONTAINERS CLOUD SERVICES AUTOMATE , ARISTA, , AWS, DATABASES, YOUR WINDOWS, CISCO, LXC … GOOGLE CLOUD, LOGGING, ENTERPRISE UNIX … JUNIPER … AZURE … SOURCE CONTROL MANAGEMENT…

USE CASES

PROVISIONING CONFIGURATION APP CONTINUOUS SECURITY & ORCHESTRATION MANAGEMENT DEPLOYMENT DELIVERY COMPLIANCE

9 ANSIBLE TOWER INTEGRATIONS

Client accessing Ansible Tower

CMDB

Postgre5QL

MANAGED HOSTS DOMAIN CONTROLLER

10 FEATURE OVERVIEW

11 ANSIBLE TOWER

JOB STATUS UPDATE

Heads-up NOC-style automation dashboard displays everything going on in your Ansible environment.

12 ANSIBLE TOWER

NEW IN ANSIBLE TOWER 3.3

Mapping Ansible Tower organizations and teams from SAML attributes ROLE-BASED ACCESS CONTROL Easier SAML configuration of two-factor

authentication Creates the necessary separation and isolation of users and resources. Users can safely use Configure multiple LDAP servers in a single Ansible Tower to work only on the systems in Ansible Tower instance the environments to which they have access.

Ansible Tower 3.3 is now an OAuth2 provider

Users and administrators can create application tokens

13 ANSIBLE TOWER

ACTIVITY STREAM

Securely stores every Job that runs, and enables you to view them later, or export details through Tower’s API.

14 ANSIBLE TOWER

MULTI-PLAYBOOK WORKFLOWS

Tower’s multi-Playbook workflows chains any number of Playbooks together to create a single workflow. Different Jobs can be run depending on success or failure of the prior Playbook.

15 ANSIBLE TOWER

SCALE-OUT CLUSTERING

Connect multiple Tower nodes into a Tower cluster to add redundancy and capacity to your automation platform.

Add reserved capacity, capacity by organization, deploy remote execution nodes for additional local capacity.

NEW! Push-button Ansible Tower deployment and dynamic scaling at runtime for Red Hat OpenShift Container Platform users

16 ANSIBLE TOWER

MANAGE AND TRACK YOUR INVENTORY

Tower’s inventory syncing and provisioning callbacks allow nodes to request configuration on demand, enabling autoscaling.

NEW! Smart Inventories allow you to organize and automate hosts across all your providers based on a powerful host fact query engine.

NEW! See alerts from Red Hat Insights directly from Tower, and use Insights-provided Playbook Remediation to fix issues in your infrastructure.

17 ANSIBLE TOWER

SCHEDULE JOBS

Enables you to schedule any Job now, later, or forever.

18 ANSIBLE TOWER

INTEGRATED NOTIFICATIONS

Stay informed of your automation status via integrated notifications. Connect Slack, Hipchat, SMS, email and more.

19 ANSIBLE TOWER

SELF-SERVICE IT

Tower lets you launch Playbooks with just a single click. It can prompt you for variables, let you choose from available secure credentials and monitor the resulting deployments.

20 ANSIBLE TOWER

REMOTE COMMAND EXECUTION

Run simple tasks on any host with Tower's remote command execution. Add users or groups, reset passwords, restart a malfunctioning service or patch a critical security issue, quickly.

21 ANSIBLE TOWER

EXTERNAL LOGGING

Connect Tower to your external logging and analytics provider to perform analysis of automation and event correlation across your entire environment.

22 Ansible Offerings: Understanding the Differences

AWX vs. Ansible Tower ● ● ● ●

● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ●

● ● ●

● ●

● ● ● ● ● ○ ○ ○ ● ○

●

● GETTING STARTED

Have you used Ansible already? Try Tower for free: ansible.com/tower-trial

Would you like to learn Ansible? It’s easy to get started: ansible.com/get-started

Want to learn more? Videos, webinars, case studies, whitepapers: ansible.com/resources

29