Ansible Role: Rubrik CloudOn

Complete the AWS configuration process required for the Rubrik CloudOn feature which provides the ability to convert a snapshot, an archived snapshot, or a replica into an Amazon Machine Image (AMI) and then run that AMI on an Amazon virtual private cloud (VPC).

Requirements

The follow requirements were pulled from the various AWS Modules used in this role:

boto
boto3
botocore
python >= 2.6

Role Variables

Required

Variable	Description
s3_bucket_name	The name of the S3 bucket where Rubrik will store archived snapshots.
on_prem_rubrik_cidr	The IP Address plus CIDR notation of the Rubrik On-Prem Cluster.
vpc_id	The VPC ID where the Rubrik Bolt instance will be dynamically created and destroyed.
aws_region	The specific AWS region where the configurations will occur. Please use the "region" options listed in the AWS documentation as values.

Default (see defaults/main.yml)

Variable	Default	Description
create_new_user	true	Flag to determine if a new user specific to CloudOn is created. If the flag is set to `false` the role will associate the new S3 Security Policy with the IAM provided in the `iam_user` variable.
iam_user	rubrik-cloudon	The name of the IAM User that will be associated with Rubrik CloudOn IAM Policy created during this process. If `create_new_user` is set to `false` this value needs to be updated to an IAM user that has already been created.
s3_security_policy_name	rubrik_cloudon	The name of the IAM Policy that has all required permissions for Rubrik CloudOn.
s3_security_policy_description	Security policy used for Rubrik CloudOn.	The description of the IAM Policy that has all required permissions for Rubrik CloudOn.
security_group_name	rubrik-cloudon	The name of the Security Group configured to allow the ports required for Rubrik CloudOn.
security_group_description	Security group used for Rubrik CloudOn	The description of the Security Group configured to allow the ports required for Rubrik CloudOn.
security_group_role_description	Ports required for Rubrik CloudOn	The description of the Security Group port roles configured for Rubrik CloudOn

Dynamically Generated (vars/main.yml)

Variable	Description
s3_bucket_arn	The dynamically generated ARN of the S3 bucket provided in the `s3_bucket_name` variable and used in the `s3_security_policy.json.j2` template.

Output

When create_new_user is set to the default value of true the new IAM users Access and Secret Key will be provided at the end of the Playbook. Please note that the Secret key will only be provided during the Playbook run where it is first created.

ok: [localhost] => {
    "msg": "Access Key - AKIAQQD3AFGPKHCV8L9Q"
}

ok: [localhost] => {
    "msg": "Secret Key - 5a3E4bCIc87CpQQDimkNdIi4ree2CiASDFh1Uh8H"
}

Dependencies

Ansible role: rubrik-devops.aws-vmimport-role

Example Playbook

- hosts: localhost
  gather_facts: false
  roles:
    - rubrik-devops.rubrik-cloudon
  vars:
    s3_bucket_name: "example-bucket"
    on_prem_rubrik_cidr: "192.168.0.0/24"
    vpc_id: vpc-9e79ddd8
    aws_region: us-east-2

License

GPLv3

oip-rnd / ansible-role-rubrik-cloudon Goto Github PK