As your organization grows, so does your workload—and the IT resources required to manage it. There is no “one-size-fits-all” system management solution, but a centralized, open source tool such as Foreman can help you manage your company’s IT assets by provisioning, maintaining, and updating hosts throughout the complete lifecycle. Foreman is an open source project that helps system administrators manage servers throughout their lifecycle, from provisioning and configuration to orchestration and monitoring. Using Puppet, Ansible and Foreman’s smart proxy architecture, you can easily automate repetitive tasks, quickly deploy applications, and proactively manage change, both on-premise with VMs and bare-metal or in the cloud. The talk will explain the key features like provisioning, monitoring, and configuration management in brief and how easy it becomes to have all these features under the same hood to manage your datacenters.
2. About me
Who am I, and why you should care?
Quality Engineer @ Red Hat
Satellite 6 QE
Follow me:
Twitter: @NikhilKathole1
Github: ntkathole
2
3. Agenda
What we’re going to cover (quickly)
1. Traditional IT Workflow
2. Overview of Foreman and Katello
3. Configuration management with Ansible
4. OpenSCAP
5. What’s next?
6. Q & A
3
4. IT Workflow
Operations, Networking, Security, Development
1. Dynamic and distributed infrastructure
2. Repetitive processes
3. Development and deployment
4. Accountability
5. Monitoring, audits and log reports
6. Compliance and policies
4
7. Foreman Plugins
1. Choose the environment as per specific needs
2. Plugins offer custom features and maximize the flexibility
Extend and modify the Foreman and Smart-proxy
7
9. Provisioning
Virtualize _all_ the workloads
1. Provisioning types
2. Manages services through smart-proxy
3. Integration with well known hypervisors and cloud platforms
9
10. Provision from anywhere
Run the infrastructure of your choice
10
Bare Metal Provisioning
- Discovery
- Bootdisk
Cloud Providers
- Openstack
- Amazon EC2
- Google
Virtualization Infrastructure
- RHEV/Ovirt
- VMware
- Libvirt
Linux Containers
- Atomic
- Docker
15. How does Katello help?
15
1. Creating custom builds of your content
(Dev -> QE -> Stage -> Production)
2. Filtering of contents
3. Updates/Patch management for content hosts
4. Tracer - finds outdated running applications in your system
17. Ansible with Foreman
Simplest way to automate apps and IT infrastructure
1. Deploy and assign ansible roles
2. Ansible-rex features
3. Automated job scheduling
17
21. When Foreman meets AWX
Scaling up ansible usage
1. Two Use Cases:
a. Dynamic inventory
i. Allowing AWX to use Foreman as a dynamic inventory
source
b. Provisioning callback
i. Allowing systems provisioned via Foreman to ‘callback’
to AWX so that playbook runs can happen post
provisioning
21
25. OpenSCAP
Security Compliance and vulnerability assessment
1. Automate IT compliance and vulnerability risk management
across the hybrid enterprise
2. Scan to assess the risk state of the data center against policies
3. Choose what you want : puppet or ansible
25
27. Tell foreman about your world
27
1. Compute Resources
2. Compute Profiles
3. Subnets
4. Domains
5. Operating Systems
6. Activation Keys
7. Ansible Roles
8. Puppet Classes
And build a new host ...
28. Let’s see the larger picture of your
infrastructure!
28
29. Huge Bonus
29
1. Large organizations and/or multi-tenancy:
a. Organizations (Divisions)
b. Locations
2. Smart Proxies located locally on Foreman itself or
independent
3. FreeIPA/AD integration
4. Strong RBAC model
a. Users / Groups
b. Permissions / Filters
5. Automate using RESTful APIs and CLI support (Hammer)
31. Questions?
● Visit us http://theforeman.org/
● If you do something cool with Foreman, let us know!
● Find us:
− IRC: irc.freenode.net
● #theforeman
● #theforeman-dev
− Reach out to us at
● https://community.theforeman.org/
31
32. 32
Want to know more about Ansible integration with Foreman?