Red Hat Ansible for Network Automation

Temporarily remove the line vault_password_file = ../.rhv/vault-secret from your ansible.cfg file then commit your work to the Git repository.

[student@workstation ansible-generic-project]$ cat ansible.cfg
[defaults]
inventory = inventory
host_key_checking = False
gathering = explicit

[persistent_connection]
command_timeout = 180
connect_timeout = 100
connect_retry_timeout = 100

Update the repository. If prompted the Git credentials are student, password student.

[student@workstation ansible-generic-project]$ git add ansible.cfg
[student@workstation ansible-generic-project]$ git commit -m "ch7 lab 4"
[student@workstation ansible-generic-project]$ git push

Create a credential named vyos-access that provides administrative access to VyOS devices as user vyos with password vyos. The Credential type is Machine.

1. Click the Settings icon (the gear icon at the upper right) to go to the SETTINGS screen.

2. Click the Credentials card to go to the SETTINGS / CREDENTIALS screen.

3. At the SETTINGS / CREDENTIALS screen, click ADD to add a credential.

4. At the CREATE CREDENTIAL screen, set the NAME field to vyos-access. Set TYPE to Machine. In the TYPE DETAILS form, set USERNAME to vyos and PASSWORD to vyos.

5. Click SAVE at the lower right to finalize the creation of the vyos-access Credential.

Create a credential named student-scm that provides read access to the ansible-generic-project Git repo as user student with password student. The Credential type is Source Control.

1. Click the Settings icon (the gear icon at the upper right) to go to the SETTINGS screen.

2. Click the Credentials card to go to the SETTINGS / CREDENTIALS screen.

3. At the SETTINGS / CREDENTIALS screen, click ADD to add a credential.

4. At the CREATE CREDENTIAL screen, set the NAME field to student-scm. Set TYPE to Source Control. In the TYPE DETAILS form, set USERNAME to student and PASSWORD to student.

5. Click SAVE at the lower right to finalize the creation of the student-scm Credential.

Create a Project in Red Hat Ansible Tower named vyos-hn-dn-ns. The project should have SCM Type of Git, and be configured with SCM source URL of http://git.lab.example.com:3000/student/ansible-generic-project.git, using branch master. It should use the student-scm SCM Credential you create in order to connect to the Git repo.

1. At the landing page, click the PROJECTS link to go to the PROJECTS page.

2. On the PROJECTS page, click ADD to add a project.

3. Set the NAME field to vyos-hn-dn-ns. Click the magnifying glass icon to select Default in the ORGANIZATION field. Set SCM TYPE to Git. In the SOURCE DETAILS form, set SCM URL to http://git.lab.example.com:3000/student/ansible-generic-project.git, SCM BRANCH to master, and SCM CREDENTIAL to student-scm.

4. Click SAVE to finalize the creation of the vyos-hn-dn-ns Project.

Create a Job Template in Red Hat Ansible Tower named vyos-hn-dn-ns. The JOB TYPE should be Check, the INVENTORY should be the lab.example.com inventory that was created in Lab 4. The MACHINE CREDENTIAL should be the vyos-access Credential created in step 1. The PLAYBOOK should be the set-hn-dn-ns.yml playbook that was created and pushed to the ansible-generic-project Git repo in Lab 7.3.

1. At the landing page, click the TEMPLATES link to go to the TEMPLATE page.

2. On the TEMPLATES page, click ADD to add a template and select Job Template as the template type.

3. Set the NAME field to vyos-hn-dn-ns. Set JOB TYPE to Check, INVENTORY to lab.example.com, and PROJECT to vyos-hn-dn-ns. For PLAYBOOK, select the set-hn-dn-ns.yml playbook that was created and pushed to the ansible-generic-project Git repo in Lab 7.3. Set MACHINE CREDENTIAL to vyos-access. Set Limit to vyos.

4. Click SAVE to finalize the creation of the vyos-hn-dn-ns Job Template.

Execute the Job Template to check your playbook.

Add back the line vault_password_file = ../.rhv/vault-secret to your ansible.cfg file.

[student@workstation ansible-generic-project]$ cat ansible.cfg
[defaults]
inventory = inventory
host_key_checking = False
gathering = explicit
vault_password_file = ../.rhv/vault-secret

[persistent_connection]
command_timeout = 180
connect_timeout = 100
connect_retry_timeout = 100