Red Hat Ansible Automation Platform
by IBM • • Configuration Management Tools
Red Hat Ansible Automation Platform is agentless configuration management and IT automation software built on open source Ansible and sold by quote.
Red Hat Ansible Automation Platform describes servers, network devices and cloud resources in playbooks and brings each one to that declared state. It connects over SSH or WinRM, so nothing is installed on the machines it manages. It is a Red Hat product, and Red Hat has been part of IBM since IBM completed the acquisition on 9 July 2019. The platform combines more than a dozen upstream open source projects into one security-hardened enterprise platform. It puts automation under one governance model and one management plane, from the data centre to the edge. Automation controller is the web console: it lists inventories with their groups and hosts, launches job templates and assigns roles over credentials, inventories and templates. Event-Driven Ansible starts a job from user-defined rules when an alert arrives, which is how drift on a node is found and corrected. The new automation orchestrator is where teams design and manage IT operations workflows. Underneath, Ansible Vault encrypts sensitive values, check mode previews a run without applying it, and the serial keyword rolls a change through hosts in batches that stop at a set failure percentage. Inventories can be read live from cloud providers, and community roles and collections install from Ansible Galaxy. The platform suits enterprises that automate hybrid cloud, edge, network and virtual infrastructure and want governance and vendor support around that work. IT operations, network and security teams run it, often in organisations already standardised on Red Hat Enterprise Linux or Red Hat OpenShift. Customers can install it themselves on RHEL, on OpenShift or Azure Red Hat OpenShift, or from the AWS, Azure and Google Cloud marketplaces. Red Hat also runs it as a managed service on AWS and a managed application on Microsoft Azure, which takes installation and upgrades off the customer's hands. Network teams push one set of playbooks to switches and routers across campus, branch, cloud and edge networks, and the platform works with Cisco Catalyst Center. In AIOps, an AI tool flags a problem and Ansible carries out the governed fix, such as confirming a false positive or restarting a system. Security teams automate investigation, incident response and compliance enforcement, with credentials held in HashiCorp Vault or CyberArk. Virtualisation teams automate virtual machines across their lifecycle, including the move away from a legacy platform.
Features
- Included: Declarative desired-state enforcement
- Included: Idempotent configuration runs
- Included: Agentless execution over SSH and WinRM
- Not included: Agent-based scheduled convergence
- Included: Node drift detection and remediation
- Included: No-op dry run of pending changes
- Included: Community module registry
- Included: Dynamic inventory from cloud providers
- Included: Linux, Windows and network device management
- Included: Encrypted secrets in configuration data
- Included: Rolling orchestration across node batches
- Included: Web console with node inventory
- Included: Role-based access on the control server
- Not included: CIS and STIG compliance profiles
- Included: Event-driven automation triggers
- Not included: Change audit trail per node
- Included: Open source configuration engine
Additional Features
- Automation controller web console
- Job templates launched from the console
- Inventories with groups and hosts
- Role-based access to credentials, inventories and job templates
- Event-Driven Ansible rule-based triggers
- Drift detection and remediation with Event-Driven Ansible
- Automation orchestrator for IT operations workflows
- Agentless connections over SSH and WinRM
Best for
- Enterprises automating hybrid cloud, edge, network and virtual infrastructure
- IT operations teams that want vendor support behind their Ansible automation
- Network teams running multivendor campus, branch and edge networks
- Organisations already standardised on RHEL or Red Hat OpenShift
- Security teams automating incident response and compliance enforcement
- Teams that will not install an agent on every managed node
- Teams deploying from the AWS, Azure or Google Cloud marketplaces
Use cases
- Configuring Linux and Windows servers from playbooks
- Pushing configuration to switches, routers and bridges
- Remediating configuration drift when a monitoring alert fires
- Rolling a change across server batches with a failure threshold
- Previewing a change with a check mode dry run
- Automating virtual machines when moving off a legacy platform
- Automating security investigation and incident response
- Enforcing compliance settings across a server estate
- Restarting systems after an AIOps tool confirms a real issue
- Building inventories live from cloud provider APIs
- Encrypting passwords and keys kept in playbook data
- Running the same automation across branch, campus and data centre networks
Screenshots & Videos
Explore Red Hat Ansible Automation Platform in action
User Reviews
Compare with Similar Software
Click to compare side by side with Red Hat Ansible Automation Platform