yeah, we are going to do it through AAP/AWX. Where my interest is besides the method ( reporting vs clobbering ), is the intervals people are using, which you answered. We are currently migrating away from Puppet in favor of Ansible, and in the process, we are reviewing decisions that were made when puppet was installed, to see if those are still valid. Many have been changed, because technology has changed. Thanks for the info, it's really helpful.
On Tue, Jun 27, 2023 at 4:09 PM Evan Hisey <[email protected]> wrote: > For drift control I don't find ansible the best tool when compared to > something like Puppet in this role. However if drift control is important, > that is were Tower/AWX or Satellite (ir pure RHEL based) start to shine. > You can setup a scheduled application of playbooks to always ensure the > configurations are current and up to date. I used Satellite and Ansible to > maintain STIG. and FISMA MED security configs across multiple federal sites > with a scheduled nightly push of core configs to all systems. > > On Tue, Jun 27, 2023 at 2:11 PM John Petro <[email protected]> wrote: > >> Good Afternoon, >> I was wondering what you all are doing to manage configuration drift. >> Are you having ansible fix the drift, are you having it notify you of the >> drift, or are you doing something else. At work, we are preparing to start >> having some conversations about what we want to do, and I thought this >> information from you all might be helpful in our journey. >> >> Thanks for your time!! >> >> ---john >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com >> <https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAEcFzYwKs0zETYYuPR0TPHNJwtLQDS8ENyoE7ec%2Bvxk_vGfntA%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CAEcFzYwKs0zETYYuPR0TPHNJwtLQDS8ENyoE7ec%2Bvxk_vGfntA%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAPAjob9uAPQT%2BObJw1u8hZje1ymDc-45GqjYv59F54VBRJd%2Bug%40mail.gmail.com.
