As your organization grows, so does your workload—and the IT resources required to manage it. There is no “one-size-fits-all” system management solution, but a centralized, open source tool such as Foreman can help you manage your company’s IT assets by provisioning, maintaining, and updating hosts throughout the complete lifecycle. Foreman is an open source project that helps system administrators manage servers throughout their lifecycle, from provisioning and configuration to orchestration and monitoring. Using Puppet, Ansible and Foreman’s smart proxy architecture, you can easily automate repetitive tasks, quickly deploy applications, and proactively manage change, both on-premise with VMs and bare-metal or in the cloud. The talk will explain the key features like provisioning, monitoring, and configuration management in brief and how easy it becomes to have all these features under the same hood to manage your datacenters.

1. Simplifying Your IT Workflow
With Katello and Foreman
Nikhil Kathole
1

2. About me
Who am I, and why you should care?
Quality Engineer @ Red Hat
Satellite 6 QE
Follow me:
Twitter: @NikhilKathole1
Github: ntkathole
2

3. Agenda
What we’re going to cover (quickly)
1. Traditional IT Workflow
2. Overview of Foreman and Katello
3. Configuration management with Ansible
4. OpenSCAP
5. What’s next?
6. Q & A
3

4. IT Workflow
Operations, Networking, Security, Development
1. Dynamic and distributed infrastructure
2. Repetitive processes
3. Development and deployment
4. Accountability
5. Monitoring, audits and log reports
6. Compliance and policies
4

5. 5
How Can I Simplify?

6. Foreman
Managing the Lifecycle of your Systems
6

7. Foreman Plugins
1. Choose the environment as per specific needs
2. Plugins offer custom features and maximize the flexibility
Extend and modify the Foreman and Smart-proxy
7

8. Foreman Plugins
Huge ecosystem of plugins
8

9. Provisioning
Virtualize _all_ the workloads
1. Provisioning types
2. Manages services through smart-proxy
3. Integration with well known hypervisors and cloud platforms
9

10. Provision from anywhere
Run the infrastructure of your choice
10
Bare Metal Provisioning
- Discovery
- Bootdisk
Cloud Providers
- Openstack
- Amazon EC2
- Google
Virtualization Infrastructure
- RHEV/Ovirt
- VMware
- Libvirt
Linux Containers
- Atomic
- Docker

11. Operating Systems
Known to install successfully
11
And many more...

12. 12
I got an idea of managing infrastructure,
But what about managing contents ?

13. Katello
Adds the power of content management to Foreman
13
Local Repositories Snapshot content Package and Errata Updates

14. Managing contents with Katello
14
External sync/Direct Upload

15. How does Katello help?
15
1. Creating custom builds of your content
(Dev -> QE -> Stage -> Production)
2. Filtering of contents
3. Updates/Patch management for content hosts
4. Tracer - finds outdated running applications in your system

16. 16
What about configuration management ?

17. Ansible with Foreman
Simplest way to automate apps and IT infrastructure
1. Deploy and assign ansible roles
2. Ansible-rex features
3. Automated job scheduling
17

18. Ansible Roles
18

19. Assigning Ansible Roles
19

20. Ansible Execution Templates
20

21. When Foreman meets AWX
Scaling up ansible usage
1. Two Use Cases:
a. Dynamic inventory
i. Allowing AWX to use Foreman as a dynamic inventory
source
b. Provisioning callback
i. Allowing systems provisioned via Foreman to ‘callback’
to AWX so that playbook runs can happen post
provisioning
21

23. Provisioning callback
Templates
23

24. Provisioning callback
How it works?
24
Foreman AWX
Compute Resource or
Bare Metal
1
3
4
2
5

25. OpenSCAP
Security Compliance and vulnerability assessment
1. Automate IT compliance and vulnerability risk management
across the hybrid enterprise
2. Scan to assess the risk state of the data center against policies
3. Choose what you want : puppet or ansible
25

26. 26

27. Tell foreman about your world
27
1. Compute Resources
2. Compute Profiles
3. Subnets
4. Domains
5. Operating Systems
6. Activation Keys
7. Ansible Roles
8. Puppet Classes
And build a new host ...

28. Let’s see the larger picture of your
infrastructure!
28

29. Huge Bonus
29
1. Large organizations and/or multi-tenancy:
a. Organizations (Divisions)
b. Locations
2. Smart Proxies located locally on Foreman itself or
independent
3. FreeIPA/AD integration
4. Strong RBAC model
a. Users / Groups
b. Permissions / Filters
5. Automate using RESTful APIs and CLI support (Hammer)

30. What’s next...
30
1. Foreman-kubevirt integration
2. Integration with Keycloak
3. GraphQL as api v3
4. Foreman-ansible-modules

31. Questions?
● Visit us http://theforeman.org/
● If you do something cool with Foreman, let us know!
● Find us:
− IRC: irc.freenode.net
● #theforeman
● #theforeman-dev
− Reach out to us at
● https://community.theforeman.org/
31

32. 32
Want to know more about Ansible integration with Foreman?

33. THANK YOU!
Nikhil Kathole
@NikhilKathole1
33