For drift control I don't find ansible the best tool when compared to something like Puppet in this role. However if drift control is important, that is were Tower/AWX or Satellite (ir pure RHEL based) start to shine. You can setup a scheduled application of playbooks to always ensure the configurations are current and up to date. I used Satellite and Ansible to maintain STIG. and FISMA MED security configs across multiple federal sites with a scheduled nightly push of core configs to all systems.
On Tue, Jun 27, 2023 at 2:11 PM John Petro <[email protected]> wrote: > Good Afternoon, > I was wondering what you all are doing to manage configuration drift. > Are you having ansible fix the drift, are you having it notify you of the > drift, or are you doing something else. At work, we are preparing to start > having some conversations about what we want to do, and I thought this > information from you all might be helpful in our journey. > > Thanks for your time!! > > ---john > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAEcFzYwKs0zETYYuPR0TPHNJwtLQDS8ENyoE7ec%2Bvxk_vGfntA%40mail.gmail.com.
