Discover existing Ansible content for RHEL system roles

Red Hat recommends that you use trusted automation content that has been tested and approved by Red Hat or your organization.

About this task
Copy link

Automation hub is a central repository for discovering, downloading, and managing trusted content collections from Red Hat and its partners. Private automation hub provides an on-premise solution for managing content collections.

Procedure
Copy link

  1. Click on the Ansible A icon in the Red Hat Developer Hub navigation panel.
  2. Click Discover existing collections.
  3. Click Go to Automation Hub.
    • If private automation hub has been configured in the Ansible plug-ins, you are redirected to your PrivateHubName instance.
    • If private automation hub has not been configured in the Ansible plug-ins installation configuration, you will be redirected to the Red Hat Hybrid Console (RHCC) automation hub.

    In this example, you are redirected to the RHCC automation hub.

  4. If you are prompted to log in, provide your Red Hat Customer Portal credentials.
  5. Filter the collections with the rhel firewall keywords.

    The search returns the rhel_system_roles collection.

    The RHEL System Roles collection contains certified Ansible content that you can reuse to configure your firewall.

Create a new playbook project to configure a firewall
Copy link

Create a new Ansible Playbook project quickly using the plug-in templates. This sets up the basic structure needed to configure your Red Hat Enterprise Linux firewall successfully.

Procedure
Copy link

  1. Click the Ansible A icon in the Red Hat Developer Hub navigation panel.
  2. From the Create dropdown menu on the landing page, select Create Ansible Git Project.
  3. Click Choose in the Create Ansible Playbook Project software template.
  4. Fill in the following information in the Create Ansible Playbook Project page:
    Expand
    Field Required Description Example value

    Source code repository organization name or username

    Yes

    The name of your source code repository username or organization name.

    my_github_username

    Playbook repository name

    Yes

    The name of your new Git repository.

    rhel_firewall_config

    Playbook description

    No

    A description of the new playbook project.

    This playbook configures firewalls on Red Hat Enterprise Linux systems

    Playbook project’s collection namespace

    Yes

    The new playbook Git project creates an example collection folder for you. Enter a value for the collection namespace.

    my_galaxy_username

    Playbook project’s collection name

    Yes

    This is the name of the example collection.

    rhel_firewall_config

    Catalog Owner Name

    Yes

    The name of the Developer Hub catalog item owner. It is a Red Hat Developer Hub field.

    my_rhdh_username

    System

    No

    This is a Red Hat Developer Hub field.

    my_rhdh_linux_system

  5. Click Review.
  6. Click Create to provision your new playbook project.
  7. Click Open in catalog to view your project.

Create a new playbook to automate the firewall configuration
Copy link

Create a new playbook and use the RHEL System Role collection to automate your Red Hat Enterprise Linux firewall configuration.

Procedure
Copy link

  1. In your Dev Spaces instance, click File > New File.
  2. Enter firewall.yml for the filename and click OK to save it in the root directory.
  3. Add the following lines to your firewall.yml file: 
    ---
- name: Open HTTPS and SSH on firewall
  hosts: rhel
  become: true
  tasks:
    - name: Use rhel system roles to allow https and ssh traffic
      vars:
        firewall:
          - service: https
            state: enabled
            permanent: true
            immediate: true
            zone: public
          - service: ssh
            state: enabled
            permanent: true
            immediate: true
            zone: public
      ansible.builtin.include_role:
        name: redhat.rhel_system_roles.firewall
    Note

    You can use Ansible Lightspeed with IBM watsonx Code Assistant from the Ansible VS Code extension to help you generate playbooks. For more information, refer to the Ansible Lightspeed with IBM watsonx Code Assistant User Guide.

Edit your firewall playbook project
Copy link

The Ansible plug-ins integrate OpenShift Dev Spaces to edit your Ansible projects. OpenShift Dev Spaces provides on-demand, web-based Integrated Development Environments (IDEs).

About this task
Copy link

Ansible Git projects provisioned using the Ansible plug-ins include best practice configurations for OpenShift Dev Spaces. These configurations include installing the Ansible VS Code extension and providing access from the IDE terminal to Ansible development tools, such as Ansible Navigator and Ansible Lint.

Note

OpenShift Dev Spaces is optional and it is not required to run the Ansible plug-ins. It is a separate Red Hat product and it is not included in the Ansible Automation Platform or Red Hat Developer Hub subscription.

This example assumes that OpenShift Dev Spaces has been configured in the Ansible plug-ins installation.

Procedure
Copy link

In the catalog item view of your playbook project, click Open Ansible project in OpenShift Dev Spaces.

A VS Code instance of OpenShift Dev Spaces opens in a new browser tab. It automatically loads your new Ansible Playbook Git project.