# Questions on Ansible, Chef and Rundeck

**URL:** <https://forum.ansible.com/t/questions-on-ansible-chef-and-rundeck/25017>\
**Category:** Ansible Project\
**Created:** [July 19, 2017, 12:13pm UTC](https://forum.ansible.com/t/questions-on-ansible-chef-and-rundeck/25017 "2017-07-19T12:13:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Weishan\_Ang](https://avatars.discourse-cdn.com/v4/letter/w/b5a626/32.png) [@Weishan\_Ang](https://forum.ansible.com/u/Weishan_Ang)\
**Post date:** [July 19, 2017, 12:13pm UTC](https://forum.ansible.com/t/questions-on-ansible-chef-and-rundeck/25017/1 "2017-07-19T12:13:21Z")

</div>

Hi all,

We looking to implement rolling restarts/upgrade for our environment. We are currently using Chef for configuration management but it is difficult to implement orchestration in Chef, however Ansible seems to be able to do that easily.

We are looking to use Ansible (Free version) or Rundeck. Some things I noticed so far:

1. We can’t version Rundeck jobs in Git but we can do that with Ansible. This is a big thing for us.

2. Rundeck is pretty decent in managing security roles and credentials.

3. Without Ansible Tower, Ansible seems to be lacking a lot in terms of security, especially on managing SSH credentials or auditing  
Question:

4. Are there anyone using both Ansible and Chef in their environment right now?

5. Are there any ways to overcome the security aspects for Ansible without Ansible Tower?

Regards,  
Wei Shan

---

<div class="post-metadata">

**Author:** ![Andrew\_Latham](https://avatars.discourse-cdn.com/v4/letter/a/ed8c4c/32.png) [@Andrew\_Latham](https://forum.ansible.com/u/Andrew_Latham)\
**Post date:** [July 19, 2017, 3:51pm UTC](https://forum.ansible.com/t/questions-on-ansible-chef-and-rundeck/25017/2 "2017-07-19T15:51:31Z")

</div>

Please explain: “”“Are there any ways to overcome the security aspects for Ansible without Ansible Tower?”“” as I am really interested in what you mean here.

---

<div class="post-metadata">

**Author:** ![Weishan\_Ang](https://avatars.discourse-cdn.com/v4/letter/w/b5a626/32.png) [@Weishan\_Ang](https://forum.ansible.com/u/Weishan_Ang)\
**Post date:** [August 2, 2017, 3:00pm UTC](https://forum.ansible.com/t/questions-on-ansible-chef-and-rundeck/25017/3 "2017-08-02T15:00:11Z")

</div>

Based on my understanding, without Ansible tower, you can’t really control who runs what task on what inventory. As long as a user can login to the Ansible control machine, he can pretty much do everything. In my ideal world, I would love to have L1 support perform a rolling restart of all the application servers in the middle of the night.