Ansible Client Side

[Mike Cervi]

First, forgive me if my terminology is imprecise... I'm new to these tools.

Second, I work in a heavily regulated industry, and the limitations of the design are not my doing... I'm just stuck in them.  While I really understand the urge, recommendations to alter this or that in our Enterprise design simply won't be helpful.

Third, thanks in advance for your help.

I am on a team evaluating orchestration tools.  We want automated, consistent builds and the ability to update, test and deploy new code.  I've read a lot of good things about Ansible, and wanted to dig a bit deeper.  My immediate concern is that it appears Ansible is strictly run with no client side agent, and all updates are pushed from the server.  In my environment, this makes Ansible a non starter.  All communication must be initiated by the client first.  Our Firewall would drop any traffic that is not initiated by the client.

So, is Ansible just not a practical choice for me, or is there a client side agent/script that can be used to initiate updates from the server?

Thanks again.

[Greg DeKoenigsberg]

You can install Ansible on your systems and run it in pull mode. Check the documentation for details.

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7736a1e3-510e-4947-bb61-b7ef7bedec29%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Brian Coca]

​You have several options to get around that limitation, Ansible sells an enteprise product called Tower, which allows for callbacks from the clients and then is able to push changes to them.

Another option is using ansible-pull, you can install on each client and invoke it to pull the plays from a remote git repo and then update them locally.​

​It is possible to setup other tools/configurations, but that should be enough to give you and idea.​

----------

Brian Coca

[Mike Cervi]

Thanks to all that replied.  Looks like I have some more documentation to read.

Mike