EX407 Red Hat Certified Specialist in Ansible Automation exam Questions and Answers

Solution as:

# pwd

/home/admin/ansible

# echo "atenorth" >password.txt

# chmod 0600 password.txt

# ansible-vault create vault.yml --vault-password-file=password.txt

---

- dev_pass: wakennym

- mgr_pass: rocky

wq

# cat vault.yml

$ANSIBLE_VAULT;1.1;AES256

36383862376164316436353665343765643331393433373564613762666531313034336438353662

3464346331346461306337633632393563643531376139610a343531326130663266613533633562

38623439316631306463623761343939373263333134353264333834353264343934373765643737

3535303630626666370a643663366634383863393338616661666632353139306436316430616334

65386134393363643133363738656130636532346431376265613066326162643437643064313863

6633333537303334333437646163343666666132316639376531

# ansible-vault view vault.yml

password:******

---

- dev_pass: wakennym

- mgr_pass: rocky

Solution as:

----------

# pwd

/home/admin/ansible/roles/

# ansible-galaxy init apache

# vim apache/vars/main.yml

---

# vars file for apache

http_pkg: httpd

firewall_pkg: firewalld

http_srv: httpd

firewall_srv: firewalld

rule: http

webpage: /var/www/html/index.html

template: index.html.j2

wq!

# vim apache/tasks/package.yml

---

- name: Installing packages

yum:

name:

- "{{http_pkg}}"

- "{{firewall_pkg}}"

state: latest

wq!

# vim apache/tasks/service.yml

---

- name: start and enable http service

service:

name: "{{http_srv}}"

enabled: true

state: started

- name: start and enable firewall service

service:

name: "{{firewall_srv}}"

enabled: true

state: started

wq!

# vim apache/tasks/firewall.yml

---

- name: Adding http service to firewall

firewalld:

service: "{{rule}}"

state: enabled

permanent: true

immediate: true

wq!

# vim apache/tasks/webpage.yml

---

- name: creating template file

template:

src: "{{template}}"

dest: "{{webpage}}"

notify: restart_httpd

!wq

# vim apache/tasks/main.yml

# tasks file for apache

- import_tasks: package.yml

- import_tasks: service.yml

- import_tasks: firewall.yml

- import_tasks: webpage.yml

wq!

# vim apache/templates/index.html.j2

Welcome to {{ ansible_facts.fqdn }} on {{ ansible_facts.default_ipv4.address }}

# vim apache/handlers/main.yml

---

# handlers file for apache

- name: restart_httpd

service:

name: httpd

state: restarted

wq!

# cd ..

# pwd

/home/admin/ansible/

# vim httpd.yml

---

- name: Including apache role

hosts: webservers

pre_tasks:

- name: pretask message

debug:

msg: 'Ensure webserver configuration'

roles:

- ./roles/apache

post_tasks:

- name: Check webserver

uri:

url: "http://{{ ansible_facts.default_ipv4.address }} "

return_content: yes

status_code: 200

wq!

# ansible-playbook httpd.yml –-syntax-check

# ansible-playbook httpd.yml

# curl http://serverx

ansible-vault create myvault.yml

Create new password: notsafepw Confirm password: notsafepw ansible-vault rekey myvault.yml

Current password: notsafepw New password: iwejfj2221 Confirm password: iwejfj2221