Cisco UCS Agentless Configuration Management Ansible or Microsoft DSC

Transcription

1

2 DEVNET-2916 Cisco UCS Agentless Configuration Management Ansible or Microsoft DSC John McDonough, Technical Leader Developer Evangelist

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#devnet Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda DEVNET 2916 Cisco UCS Agentless Configuration Management - Ansible or Microsoft Desired State Configuration What is Angentless Configuration Management UCS Ansible Who / Where / What / How Install Demo UCS Microsoft DSC Who / What / Where / How Install Demo Conclusion

5 What is Agentless Configuration Management

6 What is Agentless Configuration Management Agentless Configuration Management Managed devices do not have an agent listening for updates Updates are pushed to managed devices Scripts or API calls are executed on the managed devices No timers are on the managed devices Control is maintained by the configuration management master Author Configuration Push Configuration DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 UCS Ansible

8 Who / Where / What Who UCS Ansible is currently maintained by UCS Engineering and some UCS TMEs, SEs, and DevNet DEs (Developer Evangelists) Where Github ucsm-ansible This will be changing beginning with the Ansible 2.5 release New UCS Ansible modules will be added directly to the Ansible release Pre Ansible 2.5 UCS modules will gradually be deprecated and moved to Ansible repository What Current requirements Python 2.7 ucsmsdk, ucsm-ansible, ucsm_apis DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 How Module cisco_ucs_ntp.py DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 How Playbook (yaml) hosts: localhost connection: local gather_facts: no roles: - common - hosts: ucs connection: local gather_facts: no tasks: - name: enable ntp cisco_ucs_ntp: name: "{{ntp_server}}" descr: Ansible managed NTP state: present ucs_ip: "{{ucs_ip}}" ucs_username: "{{ucs_username}}" ucs_password: "{{ucs_password}}" DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Install 1. Ansible sudo pip install ansible 2. ucsmsdk the latest git clone cd ucsmsdk sudo make install 3. ucsm_apis the latest git clone cd ucsm_apis sudo make install 4. ucsm-ansible modules git clone cd ucsm-ansible sudo python install.py DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Demo

13 UCS PowerTool Microsoft DSC

14 Who / Where / What Who UCS PowerTool is currently maintained by UCS Engineering Where cisco.com UCS PowerTool Download, owid=79283&softwareid= UCS PowerTool DSC module is packaged with UCS PowerTool as of version 2.X What Current requirements Windows Desktop PowerShell UCS PowerTool DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 How UCS PowerTool and MOF Files UCS PowerTool Connect to UCS Manager perform Object Actions Managed Object Format MOF Files Declare Object Actions DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 How NodeName = " " PsDscAllowPlainTextPassword = $true NodeName = " " PsDscAllowPlainTextPassword = $true }; ); } Configuration AutoGeneratedDSCConfig { param( [Parameter(Mandatory=$true)] [PsCredential] $ucscredential, [Parameter(Mandatory=$true) [string] $ucsconnectionstring ) Import-DSCResource -ModuleName Cisco.Ucs.DesiredStateConfiguration one line Node " " { UcsManagedObject vlan200 { Ensure = "Present" } ModifyPresent = $false ClassId= "fabricvlan" Dn = "fabric/lan/net-vlan200" PropertyMap= "Id = 200 `nname = vlan200" UcsCredentials = $ucscredential UcsConnectionString = $ucsconnectionstring Identifier = "vlan200" } Node " " { UcsManagedObject vlan201 { Ensure = "Present" ModifyPresent = $false ClassId= "fabricvlan" Dn = "fabric/lan/net-vlan201" PropertyMap= "Id = 201 `nname = vlan201" UcsCredentials = $ucscredential UcsConnectionString = $ucsconnectionstring Identifier = "vlan201" } $connectionstring = "Name= " $credential = Get-Credential AutoGeneratedDSCConfig -UcsConnectionString $connectionstring -ConfigurationData $ConfigData -ucscredential $credential one line, creates MOF files DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 Install DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Demo

19 Conclusion

20 Get hands-on with APIs and SDKs in the DevNet Zone LEARN CODE INSPIRE CONNECT In the DevNet Zone we offer: Classrooms Learn about a specific topic/technology NEW! Hack, Defend and Win! Embrace your inner hacker, then defend the network! Black Hat, White Hat Security Challenge DevNet Sandbox Explore free technology-packed 24x7 labs and play IoT foosball! Go for a 5-minute mini-hack challenge or complete all three in 15- minutes to win Learning Labs Find an open seat to start coding with self-paced tutorials (experts available) Panels Get inspired & interact with industry experts Connected Women s Event Join Susie Wee on Monday for this event followed by a DevNet Zone open house NEW! Application Developer Zone and Challenge Win a special-edition t-shirt and bragging rights complete a learning lab, a workshop, and an application developer demo Demos Exciting demos and inspiring partner solutions showcase Join DevNet! developer.cisco.com/join/cleur1 8 All DevNet members win a prize, visit the Info Desk to learn more! Workshops code with an instructor #DevNet #CLEUR

21 Hack, Defend, and Win! Come play the Black Hat, White Hat Security Challenge in the DevNet Zone! >>> Hack Embrace your inner hacker and try to access the network >>> Defend Be the heavily-armed Cisco defender that saves the day >>> Win Collect your prize and claim your bragging #DevNet #CLEUR

22 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#devnet Cisco and/or its affiliates. All rights reserved. Cisco Public

23 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

24 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 24

25 Thank you

26