Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/paloaltonetworks/ansible-role-vmware-dagger
An Ansible role that synchronizes VMware vCenter virtual machine IP addresses and tags with PAN-OS.
https://github.com/paloaltonetworks/ansible-role-vmware-dagger
ansible ansible-galaxy ansible-role paloaltonetworks panos vcenter vmware vmware-vm-inventory
Last synced: about 1 month ago
JSON representation
An Ansible role that synchronizes VMware vCenter virtual machine IP addresses and tags with PAN-OS.
- Host: GitHub
- URL: https://github.com/paloaltonetworks/ansible-role-vmware-dagger
- Owner: PaloAltoNetworks
- License: apache-2.0
- Created: 2019-01-04T22:54:15.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2019-01-25T18:47:01.000Z (about 6 years ago)
- Last Synced: 2024-12-26T23:56:06.293Z (about 2 months ago)
- Topics: ansible, ansible-galaxy, ansible-role, paloaltonetworks, panos, vcenter, vmware, vmware-vm-inventory
- Language: Python
- Homepage: https://galaxy.ansible.com/stealthllama/vmware_dagger
- Size: 35.2 KB
- Stars: 1
- Watchers: 4
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
vmware_dagger
=========
An Ansible role that gathers virtual machine IP addresses from vCenter and registers them in PAN-OS Dynamic Address Groups based on an associated VMware tag.
Requirements
------------
This role utilizes the Python libraries listed below. All are available via [PyPI](https://pypi.org) and may be installed using the `pip` installer. The use of `virtualenv` is recommended in order to avoid system library conflicts.
- [pyvmomi](https://pypi.org/project/pyvmomi/)
- [pandevice](https://pypi.org/project/pandevice/)
In addition, the [vSphere Automation SDK](https://github.com/vmware/vsphere-automation-sdk-python) is required for dynamic inventory discovery with VMware tag support. This SDK may be installed as follows:
```
$ git clone https://github.com/vmware/vsphere-automation-sdk-python.git
$ cd vsphere-automation-sdk-python
$ pip install --upgrade --force-reinstall -r requirements.txt --extra-index-url file:////lib
```
Dependencies
------------
Support for TLS 1.0 was dropped in PAN-OS version 8.0. Connecting to platforms running PAN-OS 8.0 or greater may require updates to the OpenSSL and/or Python packages on the Ansible host.
- OpenSSL 1.0.1 or greater
- Python 2.7 or greater
- vCenter 6.0, 6.5 and 6.7
Role Variables
--------------
The required variables are listed below, along with default values (see defaults/main.yml):
```
# VMware variables
vmware_tags:
vmware_datacenter:
vmware_validate_certs: False
# PAN-OS variables
panos_address:
panos_username:
panos_password:
panos_api_key:
```
Example Playbook
----------------
```
---
- name: Synchronize tagged vCenter virtual machines with PAN-OS
hosts: localhost
connection: local
gather_facts: no
roles:
- stealthllama.vmware_dagger
```
Dynamic Inventory
-----------------
This role leverages the [vmware_vm_inventory](https://docs.ansible.com/ansible/latest/plugins/inventory/vmware_vm_inventory.html) Dynamic Inventory plugin to inventory vSphere virtual machines and group them by their tag values.
The [vmware_vm_inventory](https://docs.ansible.com/ansible/latest/plugins/inventory/vmware_vm_inventory.html) plugin utilizes the following environment variables:
```
$ export VMWARE_SERVER=""
$ export VMWARE_USERNAME=""
$ export VMWARE_PASSWORD=""
```
A plugin configuration file called `vmware.yml` is required and should contain the following:
```
---
plugin: vmware_vm_inventory
validate_certs: False
with_tags: True
```
The Dynamic Inventory plugin can be tested using the following command:
```
ansible-inventory -i vmware.yml --graph
```
Usage
-----
The playbook requires a number of variables to run successfully. These variables may be defined in a separate YAML file, provided on the command line with the `--extra-vars` flag, or provided via the Ansible Tower API.
*Variables file:*
```
$ ansible-playbook -i vmware.yml myplaybook.yml [email protected]
```
*Command line (JSON):*
```
$ ansible-playbook -i vmware.yml myplaybook.yml --extra-vars='{"vm_tag":["Tag1","Tag2"],"vmware_datacenter":"MyLab", \
"panos_address":"10.0.0.1","panos_username":"admin","panos_password":"s3cr3tp@ssw0rd"}'
```
*Command line (YAML):*
```
$ ansible-playbook -i vmware.yml myplaybook.yml --extra-vars='
vm_tags:
- Tag1
- Tag2
vmware_datacenter: MyLab
panos_address: 10.0.0.1
panos_username: admin
panos_password: s3cr3tp@ssw0rd
'
```
License
-------
Apache 2.0
Author Information
------------------
Role created by Robert Hagen ([@stealthllama](https://github.com/stealthllama)).