18장. Configuring NBDE by using RHEL system roles

Procedure

1. Create a playbook file, for example, ~/playbook.yml, with the following content:

   ---
   - name: Deploy a Tang server
     hosts: tang.server.example.com
     tasks:
     - name: Install and configure periodic key rotation
       ansible.builtin.include_role:
           name: redhat.rhel_system_roles.nbde_server
       vars:
         nbde_server_rotate_keys: yes
         nbde_server_manage_firewall: true
         nbde_server_manage_selinux: true

   This example playbook ensures deploying of your Tang server and a key rotation.

   The settings specified in the example playbook include the following:

   nbde_server_manage_firewall: true

   Use the firewall system role to manage ports used by the nbde_server role.

   nbde_server_manage_selinux: true

   Use the selinux system role to manage ports used by the nbde_server role.

   For details about all variables used in the playbook, see the /usr/share/ansible/roles/rhel-system-roles.nbde_server/README.md file on the control node.

2. Validate the playbook syntax:

   $ ansible-playbook --syntax-check ~/playbook.yml

   Note that this command only validates the syntax and does not protect against a wrong but valid configuration.

3. Run the playbook:

   $ ansible-playbook ~/playbook.yml