Chapter 7. Using the rhc System Role to register the system

Procedure

1. Create a vault to save the sensitive information:

   $ ansible-vault create secrets.yml
   New Vault password: password
   Confirm New Vault password: password

2. The ansible-vault create command creates an encrypted vault file and opens it in an editor. Enter the sensitive data you want to save in the vault, for example:

   activationKey: activation_key
   username: username
   password: password

3. Save the changes, and close the editor. Ansible encrypts the data in the vault.

   You can later edit the data in the vault by using the ansible-vault edit secrets.yml command.

4. Optional: Display the vault content:

   $ ansible-vault view secrets.yml

5. Create a playbook file, for example ~/registration.yml, and use one of the following options depending on the action you want to perform:

   1. To register by using an activation key and organization ID (recommended), use the following playbook:

      ---
      - name: Registering system using activation key and organization ID
        hosts: managed-node-01.example.com
        vars_files:
          - secrets.yml
        vars:
          rhc_auth:
            activation_keys:
              keys:
                -  "{{ activationKey }}"
           rhc_organization: organizationID
        roles:
          - role: rhel-system-roles.rhc

   2. To register by using a username and password, use the following playbook:

      ---
      - name: Registering system with username and password
        hosts:  managed-node-01.example.com
        vars_files:
          - secrets.yml
        vars:
          rhc_auth:
            login:
              username: "{{ username }}"
              password: "{{ password }}"
        roles:
          - role: rhel-system-roles.rhc

6. Run the playbook:

   # ansible-playbook ~/registration.yml --ask-vault-pass

Procedure

1. Create a vault to save the sensitive information:

   $ ansible-vault create secrets.yml
   New Vault password: password
   Confirm New Vault password: password

2. The ansible-vault create command creates an encrypted file and opens it in an editor. Enter the sensitive data you want to save in the vault, for example:

   activationKey: activation_key

3. Save the changes, and close the editor. Ansible encrypts the data in the vault.

   You can later edit the data in the vault by using the ansible-vault edit secrets.yml command.

4. Optional: Display the vault content:

   $ ansible-vault view secrets.yml

5. Create a playbook file, for example ~/registration-sat.yml.

6. Use the following text in ~/registration-sat.yml to register the system by using an activation key and organization ID:

   ---
   - name: Register to the custom registration server and CDN
     hosts: managed-node-01.example.com
     vars_files:
       - secrets.yml
     vars:
       rhc_auth:
         login:
           activation_keys:
             keys:
               - "{{ activationKey }}"
           rhc_organization: organizationID
       rhc_server:
         hostname: example.com
           port: 443
           prefix: /rhsm
       rhc_baseurl: http://example.com/pulp/content
      roles:
        - role: rhel-system-roles.rhc

7. Run the playbook:

   # ansible-playbook ~/registration-sat.yml --ask-vault-pass

Procedure

1. Create a playbook file, for example ~/dis-insights.yml and add the following content in it:

   ---
   - name: Disable Insights connection
     hosts: managed-node-01.example.com
     vars:
       rhc_insights:
         state: absent
     roles:
       - role: rhel-system-roles.rhc

2. Run the playbook:

   # ansible-playbook ~/dis-insights.yml

Procedure

1. Create a playbook file, for example ~/configure-repos.yml:

   1. To enable a repository:

      ---
      - name: Enable repository
        hosts: managed-node-01.example.com
        vars:
          rhc_repositories:
            - {name: "RepositoryName", state: enabled}
         roles:
           - role: rhel-system-roles.rhc

   2. To disable a repository:

      ---
      - name: Disable repository
        hosts: managed-node-01.example.com
        vars:
          rhc_repositories:
            - {name: "RepositoryName", state: disabled}
         roles:
           - role: rhel-system-roles.rhc

2. Run the playbook:

   # ansible-playbook ~/configure-repos.yml

Procedure

1. Create a playbook file, for example ~/release.yml:

   ---
   - name: Set Release
     hosts: managed-node-01.example.com
     vars:
       rhc_release: "8.6"
     roles:
       - role: rhel-system-roles.rhc

2. Run the playbook:

   # ansible-playbook ~/release.yml

Procedure

1. Create a vault to save the sensitive information:

   $ ansible-vault create secrets.yml
   New Vault password: password
   Confirm New Vault password: password

2. The ansible-vault create command creates an encrypted file and opens it in an editor. Enter the sensitive data you want to save in the vault, for example:

   username: username
   password: password
   proxy_username: proxyusernme
   proxy_password: proxypassword

3. Save the changes, and close the editor. Ansible encrypts the data in the vault.

   You can later edit the data in the vault by using the ansible-vault edit secrets.yml command.

4. Optional: Display the vault content:

   $ ansible-vault view secrets.yml

5. Create a playbook file, for example ~/configure-proxy.yml:

   1. To register to the RHEL customer portal by using a proxy:

      ---
      - name: Register using proxy
        hosts: managed-node-01.example.com
        vars_files:
          - secrets.yml
        vars:
          rhc_auth:
            login:
              username: "{{ username }}"
              password: "{{ password }}"
          rhc_proxy:
            hostname: proxy.example.com
            port: 3128
            username: "{{ proxy_username }}"
            password: "{{ proxy_password }}"
        roles:
          - role: rhel-system-roles.rhc

   2. To remove the proxy server from the configuration of the Red Hat Subscription Manager service:

      ---
      - name: To stop using proxy server for registration
        hosts: managed-node-01.example.com
        vars_files:
          - secrets.yml
        vars:
          rhc_auth:
            login:
              username: "{{ username }}"
              password: "{{ password }}"
           rhc_proxy: {"state":"absent"}
        roles:
          - role: rhel-system-roles.rhc

6. Run the playbook:

   # ansible-playbook ~/configure-proxy.yml --ask-vault-pass

Procedure

1. Create a vault to save the sensitive information:

   $ ansible-vault create secrets.yml
   New Vault password: password
   Confirm New Vault password: password

2. The ansible-vault create command creates an encrypted file and opens it in an editor. Enter the sensitive data you want to save in the vault, for example:

   username: username
   password: password

3. Save the changes, and close the editor. Ansible encrypts the data in the vault.

   You can later edit the data in the vault by using the ansible-vault edit secrets.yml command.

4. Optional: Display the vault content:

   $ ansible-vault view secrets.yml

5. Create a playbook file, for example ~/auto-update.yml and add following content to it:

   ---
    - name: Disable Red Hat Insights autoupdates
      hosts: managed-node-01.example.com
      vars_files:
        - secrets.yml
      vars:
       rhc_auth:
         login:
           username: "{{ username }}"
           password: "{{ password }}"
       rhc_insights:
          autoupdate: false
          state: present
       roles:
         - role: rhel-system-roles.rhc

6. Run the playbook:

   # ansible-playbook ~/auto-update.yml --ask-vault-pass

Procedure

1. To enable the remediation, create a playbook file, for example ~/remediation.yml:

   ---
   - name: Disable remediation
     hosts: managed-node-01.example.com
     vars:
       rhc_insights:
         remediation: absent
         state: present
     roles:
       - role: rhel-system-roles.rhc

2. Run the playbook:

   # ansible-playbook ~/remediation.yml

Procedure

1. Create a vault to save the sensitive information:

   $ ansible-vault create secrets.yml
   New Vault password: password
   Confirm New Vault password: password

2. The ansible-vault create command creates an encrypted file and opens it in an editor. Enter the sensitive data you want to save in the vault, for example:

   username: username
   password: password

3. Save the changes, and close the editor. Ansible encrypts the data in the vault.

   You can later edit the data in the vault by using the ansible-vault edit secrets.yml command.

4. Optional: Display the vault content:

   $ ansible-vault view secrets.yml

5. Create a playbook file, for example ~/tags.yml, and add following content to it:

   ---
   - name: Creating tags
     hosts: managed-node-01.example.com
     vars_files:
       - secrets.yml
     vars:
       rhc_auth:
         login:
           username: "{{ username }}"
           password: "{{ password }}"
       rhc_insights:
         tags:
           group: group-name-value
             location: location-name-value
             description:
               - RHEL8
               - SAP
              sample_key:value
           state: present
     roles:
       - role: rhel-system-roles.rhc

6. Run the playbook:

   # ansible-playbook ~/remediation.yml --ask-vault-pass

Procedure

1. To unregister, create a playbook file, for example, ~/unregister.yml and add the following content to it:

   ---
   - name: Unregister the system
     hosts: managed-node-01.example.com
     vars:
       rhc_state: absent
     roles:
       - role: rhel-system-roles.rhc

2. Run the playbook:

   # ansible-playbook ~/unregister.yml