Questions on Ansible, Chef and Rundeck

Archives Ansible Project
1

Hi all,

We looking to implement rolling restarts/upgrade for our environment. We are currently using Chef for configuration management but it is difficult to implement orchestration in Chef, however Ansible seems to be able to do that easily.

We are looking to use Ansible (Free version) or Rundeck. Some things I noticed so far:

  1. We can’t version Rundeck jobs in Git but we can do that with Ansible. This is a big thing for us.

  2. Rundeck is pretty decent in managing security roles and credentials.

  3. Without Ansible Tower, Ansible seems to be lacking a lot in terms of security, especially on managing SSH credentials or auditing
    Question:

  4. Are there anyone using both Ansible and Chef in their environment right now?

  5. Are there any ways to overcome the security aspects for Ansible without Ansible Tower?

Regards,
Wei Shan

2

Please explain: “”“Are there any ways to overcome the security aspects for Ansible without Ansible Tower?”“” as I am really interested in what you mean here.

3

Based on my understanding, without Ansible tower, you can’t really control who runs what task on what inventory. As long as a user can login to the Ansible control machine, he can pretty much do everything. In my ideal world, I would love to have L1 support perform a rolling restart of all the application servers in the middle of the night.