Discover existing Ansible content for RHEL system roles

Red Hat recommends that you use trusted automation content that has been tested and approved by Red Hat or your organization.

About this task

Automation hub is a central repository for discovering, downloading, and managing trusted content collections from Red Hat and its partners. Private automation hub provides an on-premise solution for managing content collections.

Procedure

Click on the Ansible A icon in the Red Hat Developer Hub navigation panel.
Click Discover existing collections.
Click Go to Automation Hub.
- If private automation hub has been configured in the Ansible plug-ins, you are redirected to your PrivateHubName instance.
- If private automation hub has not been configured in the Ansible plug-ins installation configuration, you will be redirected to the Red Hat Hybrid Console (RHCC) automation hub.
In this example, you are redirected to the RHCC automation hub.
If you are prompted to log in, provide your Red Hat Customer Portal credentials.
Filter the collections with the rhel firewall keywords.

The search returns the rhel_system_roles collection.

The RHEL System Roles collection contains certified Ansible content that you can reuse to configure your firewall.

Create a new playbook project to configure a firewall

Create a new Ansible Playbook project quickly using the plug-in templates. This sets up the basic structure needed to configure your Red Hat Enterprise Linux firewall successfully.

Procedure

Click the Ansible A icon in the Red Hat Developer Hub navigation panel.
From the Create dropdown menu on the landing page, select Create Ansible Git Project.
Click Choose in the Create Ansible Playbook Project software template.

Fill in the following information in the Create Ansible Playbook Project page:


Field	Required	Description	Example value
Source code repository organization name or username	Yes	The name of your source code repository username or organization name.	`my_github_username`
Playbook repository name	Yes	The name of your new Git repository.	`rhel_firewall_config`
Playbook description	No	A description of the new playbook project.	`This playbook configures firewalls on Red Hat Enterprise Linux systems`
Playbook project’s collection namespace	Yes	The new playbook Git project creates an example collection folder for you. Enter a value for the collection namespace.	`my_galaxy_username`
Playbook project’s collection name	Yes	This is the name of the example collection.	`rhel_firewall_config`
Catalog Owner Name	Yes	The name of the Developer Hub catalog item owner. It is a Red Hat Developer Hub field.	`my_rhdh_username`
System	No	This is a Red Hat Developer Hub field.	`my_rhdh_linux_system`

Click Review.
Click Create to provision your new playbook project.
Click Open in catalog to view your project.

Create a new playbook to automate the firewall configuration

Create a new playbook and use the RHEL System Role collection to automate your Red Hat Enterprise Linux firewall configuration.

Procedure

In your Dev Spaces instance, click File > New File.
Enter firewall.yml for the filename and click OK to save it in the root directory.

Add the following lines to your firewall.yml file:

---
- name: Open HTTPS and SSH on firewall
  hosts: rhel
  become: true
  tasks:
    - name: Use rhel system roles to allow https and ssh traffic
      vars:
        firewall:
          - service: https
            state: enabled
            permanent: true
            immediate: true
            zone: public
          - service: ssh
            state: enabled
            permanent: true
            immediate: true
            zone: public
      ansible.builtin.include_role:
        name: redhat.rhel_system_roles.firewall

Note:

You can use Ansible Lightspeed with IBM watsonx Code Assistant from the Ansible VS Code extension to help you generate playbooks. For more information, refer to the Ansible Lightspeed with IBM watsonx Code Assistant User Guide.

Edit your firewall playbook project

The Ansible plug-ins integrate OpenShift Dev Spaces to edit your Ansible projects. OpenShift Dev Spaces provides on-demand, web-based Integrated Development Environments (IDEs).

About this task

Ansible Git projects provisioned using the Ansible plug-ins include best practice configurations for OpenShift Dev Spaces. These configurations include installing the Ansible VS Code extension and providing access from the IDE terminal to Ansible development tools, such as Ansible Navigator and Ansible Lint.

Note:

OpenShift Dev Spaces is optional and it is not required to run the Ansible plug-ins. It is a separate Red Hat product and it is not included in the Ansible Automation Platform or Red Hat Developer Hub subscription.

This example assumes that OpenShift Dev Spaces has been configured in the Ansible plug-ins installation.

Procedure

In the catalog item view of your playbook project, click Open Ansible project in OpenShift Dev Spaces.

A VS Code instance of OpenShift Dev Spaces opens in a new browser tab. It automatically loads your new Ansible Playbook Git project.