This is a community supported repository of ansible playbooks for automating the management of ManageIQ and/or Red Hat CloudForms Management Engine (CFME).
Playbooks provided by this project.
Performs a migration from CFME 5.7 to 5.8 utilizing steps from Migrating to Red Hat CloudForms 4.5. This playbook does not currently perform a backup, resize the disks or handle database replication scenarios.
- Appliances have already been backed up per General Configuration Section 4.4.5.1.
- Disks have already been resized.
- Environments are not utilizing database replication.
- Appliances have had memory increased to 12Gb for CloudForms 4.5 and newer appliances per requirement.
- cfme
- cfme_appliancees
- cfme_databases
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| cfme_additional_repositories | No | Additional repositories to configure when performing the migration | ||
| sat6_org_id | No | Satellite 6 organization ID (when using activation key below) | ||
| sat6_activation_key | No | Satellite 6 activation key (instead of direct subscribe to repos) |
Performs a migration from CFME 5.8 to 5.9 utilizing steps from Migrating to Red Hat CloudForms 4.6. This playbook does not currently perform a backup, resize the disks or handle database replication scenarios.
- Appliances have already been backed up per General Configuration Section 4.4.5.1.
- Disks have already been resized. (Only necessary if migrating from CFME 5.8.0.17 or earlier)
- Environments are not utilizing database replication.
- cfme
- cfme_appliancees
- cfme_databases
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| cfme_additional_repositories | No | Additional repositories to configure when performing the migration | ||
| sat6_org_id | No | Satellite 6 organization ID (when using activation key below) | ||
| sat6_activation_key | No | Satellite 6 activation key (instead of direct subscribe to repos) |
Performs a migration from CFME 5.9 to 5.10 utilizing steps from Migrating to Red Hat CloudForms 4.7. This playbook does not currently perform a backup, resize the disks or handle database replication scenarios.
- Appliances have already been backed up per General Configuration Section 4.4.5.1.
- Disks have already been resized. (Only necessary if migrating from CFME 5.8.0.17 or earlier)
- Environments are not utilizing database replication.
- cfme
- cfme_appliancees
- cfme_databases
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| cfme_additional_repositories | No | Additional repositories to configure when performing the migration | ||
| sat6_org_id | No | Satellite 6 organization ID (when using activation key below) | ||
| sat6_activation_key | No | Satellite 6 activation key (instead of direct subscribe to repos) |
Performs an update/upgrade of all packages on the CFME appliances and performs a reboot if necessary.
- cfme
- cfme_appliancees
- cfme_databases
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| cfme_additional_repositories | No | Additional repositories to configure when performing the update | ||
| sat6_org_id | No | Satellite 6 organization ID (when using activation key below) | ||
| sat6_activation_key | No | Satellite 6 activation key (instead of direct subscribe to repos) |
Performs an update/upgrade of all packages on all CFME appliances at the same time, and performs a reboot if necessary.
- cfme
- cfme_appliancees
- cfme_databases
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| cfme_addiitonal_repositories | No | Additional repositories to configure when performing the update | ||
| sat6_org_id | No | Satellite 6 organization ID (when using activation key below) | ||
| sat6_activation_key | No | Satellite 6 activation key (instead of direct subscribe to repos) |
Smoke tests Service template provisioning and retirment.
- cfme_ui_appliances
| parameter | required | default | comments |
|---|---|---|---|
| cfme_api_user | Yes | API user | |
| cfme_api_password | Yes | API password | |
| cfme_service_catalog_name | Yes | Service Catalog that contains the Service Tempalte to test | |
| cfme_service_template_name | Yes | Service Teamplte to test | |
| cfme_provision_service_dialog_options | Yes | Hash of dialog options to pass to the Service Template creation request | |
| cfme_provision_service_retries | No | 60 | Number of attempts at waiting for Provision Service task to complete |
| cfme_provision_service_delay | No | 60 | Number of seconds between attempts at waiting for Provion Service task to complete |
| cfme_retire_service_retries | No | 60 | Number of attempts at waiting for Retire Service task to complete |
| cfme_retire_service_delay | No | 60 | Number of seconds between attempts at waiting for Retire Service task to complete |
Start all of the DB services then all of the Appliance services.
- cfme_appliancees
- cfme_databases
Stop all of the Appliance services then all of the DB services.
- cfme_appliancees
- cfme_databases
Stop all of the Appliance services, then all of the DB services, then start all of the DB services, then all of the Appliance services, then perform a helath check.
- cfme_appliancees
- cfme_databases
Checks the health of the Appliances.
- cfme_appliancees
Gathers relevant logs from all of the appliances and puts them in an archive on the first DB host. Optionally emails the archive.
- cfme_databases
| parameter | required | default | comments |
|---|---|---|---|
| cfme_gather_logs_smtp_host | No | SMTP host to send log archive email through. If not specified no email will be sent. | |
| cfme_gather_logs_smtp_port | No | SMTP port to send log archive email through. If not specified no email will be sent. | |
| cfme_gather_logs_email_from | No | Email addresses to send the log archive email from. If not specified no email will be sent. | |
| cfme_gather_logs_email_to | No | Email addresses to send the log archive email to. If not specified no email will be sent |
Installs the VMware Virtual Disk Development Kit (VDDK). This is required to enable Smart State Analysis (SSA) for VMware hosts.
- You will need a VMware login to download the VDDK. We do not provide this due to VMware licensing requirements.
| parameter | required | default | comments |
|---|---|---|---|
| cfme_vddk_path | Yes | This is the file path, on the control node, of the downloaded VDDK. |
Uninstalls the VMware Virtual Disk Development Kit (VDDK). This can be utilized in conjunction with install-vddk.yml when an upgrade of the VDDK is required.
Installs the VMware HTML Console SDK. This is required to enable WebMKS for VMware Console Support.
- You will need a VMware login to download the SDK. We do not provide this due to VMware licensing requirements.
| parameter | required | default | comments |
|---|---|---|---|
| cfme_webmks_sdk_path | Yes | This is the file path, on the control node, of the downloaded SDK. |
Removes the VMware HTML Console SDK. This disables WebMKS for VMware Console Support.
Changes the VMDB PostgreSQL password, updates the database.yml files, and restarts evmserverd.
- vmdb_password is defined in files/vmdb_password.yml which is encrypted using Ansible Vault.
- The password of the vault is
smartvm. - The password of the vault can be changed with
ansible-vault rekey files/vmdb_password.yml. - The VMDB password to be used can be set by editing the vault with
ansible-vault edit files/vmdb_password.yml. - The playbook can be run with
ansible-playbook --vault-id @prompt playbooks/change_vmdb_password.ymlto prompt for the Ansible Vault password.
- cfme_appliancees
- cfme_databases
| parameter | required | default | comments |
|---|---|---|---|
| vmdb_password | Yes | This is the new password to use for the VMDB PostgreSQL account. |
Disables Medium SSL Ciphers in the CloudForms webserver configuration (/etc/httpd/conf.d/manageiq-https-application.conf).
- Addresses Tenable finding https://www.tenable.com/plugins/nessus/42873
- cfme_appliancees