For drift control I don't find ansible the best tool when compared to something like Puppet in this role. However if drift control is important, that is were Tower/AWX or Satellite (ir pure RHEL based) start to shine. You can setup a scheduled application of playbooks to always ensure the configurations are current and up to date. I used Satellite and Ansible to maintain STIG. and FISMA MED security configs across multiple federal sites with a scheduled nightly push of core configs to all systems.
On Tue, Jun 27, 2023 at 2:11 PM John Petro <jcpe...@johnpetro.com> wrote: > Good Afternoon, > I was wondering what you all are doing to manage configuration drift. > Are you having ansible fix the drift, are you having it notify you of the > drift, or are you doing something else. At work, we are preparing to start > having some conversations about what we want to do, and I thought this > information from you all might be helpful in our journey. > > Thanks for your time!! > > ---john > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ansible-project+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CAPAjob9NsjTGPNa_J8oeBbfZQOHjjqy7ELd6eHhodbHuTykkrQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAEcFzYwKs0zETYYuPR0TPHNJwtLQDS8ENyoE7ec%2Bvxk_vGfntA%40mail.gmail.com.
