The Ansible collection for NGINX Controller contains a set of Ansible roles that make it easy to incorporate NGINX Controller into your workflows. This collection helps you automate routine tasks such as generating ephemeral API tokens, managing certificate lifecycles, and configuring Controller objects (gateways, applications, and components). In this webinar, you’ll learn how to get started with the collection, including how to automate: Installation of NGINX Plus – Registration of NGINX Plus instances with NGINX Controller – Management of certificates and configurations through your pipelines with NGINX Controller On-Demand Link https://www.nginx.com/watch-on-demand/?id=automate-nginx-plus-environment-with-ansible-collection-nginx-controller

1. June 18, 2020
NGINX Controller with Ansible Collections
1
Colin McNaughton
Technical Marketing Manager
Red Hat Ansible
Brian Ehlert
Sr. Technical Product Manager
F5 Networks

2. Ansible Project Status
Ansible 2.9
{rpm, deb, pip}
Ansible 2.10 Base
{deb, pip}
Ansible Content
{collections}

3. Building Ansible 2.10
Ansible 2.10 Base
{deb, pip}
Ansible
Collections
Ansible 2.10
{rpm, deb, pip}

4. Simplified and consistent content schema
● A standardized way to organize and
package Ansible content
● Include roles, modules, module
utilities, plugins, documentation
● Semantic versioning
● Portable and flexible delivery
Introducing the Ansible Collection

5. Ansible Galaxy
galaxy.ansible.com
Ansible Automation Hub
cloud.redhat.com
● Community supported
● Extended to leverage
Collections framework
● “Latest and greatest”
● Certified, jointly supported by
Red Hat and Partner
● Access to advanced analytics
● “Slow and steady”
Step 2: Simplify Ansible Distribution Channels

6. Ansible Galaxy
galaxy.ansible.com
Ansible Automation Hub
cloud.redhat.com
Step 2: Distribution Example, Nginx Controller
https://galaxy.ansible.com/
$namespace/$collection
https://galaxy.ansible.com/nginxinc/nginx_controlle
r
namespace.collection_name.module
nginxinc.nginx_controller.nginx_controller_install
https://cloud.redhat.com/ansible/automation-hub/
$namespace/$collection
https://cloud.redhat.com/ansible/automation-
hub/nginxinc/nginx_controller/
namespace.collection_name.module
nginxinc.nginx_controller.nginx_controller_install

7. 7
Step 3: Let’s Go! (The Developer TL;DR)
1. Init collection: ansible-galaxy collection init foo.bar
2. Sanity testing: ansible-test sanity
3. Unit tests: ansible-test units
4. Integration tests: ansible-test integration
5. Build the collection: ansible-galaxy collection build
6. Publish the collection: ansible-galaxy collection publish
7. Install the collection: ansible-galaxy collection install
foo.bar

8. NGINX
(Handoff!)
NGINX Ansible Webinar

9. | ©2020 F510
ENTERPRISE-GRADE APPLICATION DELIVERY
NGINX Plus

10. | ©2020 F511 CONFIDENTIAL
High-Performance App Delivery
THE VALUE OF NGINX PLUS
FIPS-Compliance
Verifiable FIPS mode for
audit-friendly TLS
WAF Options
Stop SQL injection, LFI, RFI, and
almost any L7 attack
Active Health Checks
Detect and work around a much
wider variety of problems
Supported High Availability
Avoid single points of failure
on-prem and in clouds
Real-Time Monitoring
Create live dashboards and
connect to NGINX/3rd-party
tools
Secure Strengthen
DNS-Based Service Discovery
Automate discovery and load
balancing of new servers
Key-Value Store
Dynamically control traffic flow
through RESTful API
Clustering
Share runtime state across
multiple instances
Scale
JWT Authentication
OpenID Connect and OAuth
token validation

11. | ©2020 F512
NGINX Controller 3+ Built for Modern App Teams

12. | ©2020 F513
Capabilities of NGINX Controller
Configuration and
visibility aligned
to how teams
develop applications
App-Centric
Automates services
deployment across
pipelines reducing
overhead & complexity
Automation-
Driven API
Delivers self-service to
line of business
without compromising
enterprise-wide
compliance
Self-Service
Consolidates team
workflows and use
cases across ADC
and API Management
Workflow Across
Teams

13. Deploy NGINX PLUS

14. | ©2020 F515
EDC-RWEB-n
EDC-TWEB-n
ENABLING THE WORKFLOWS
Information Architecture
Environment: Dev
App: Trading
Gateway:
Trading
Cert: Trading
Component:
Referral
Component:
Transfers
Location: EastDC
Instance:
EDC-NGINX02
Instance:
EDC-NGINX01 EDC-RWEB-n
EDC-TWEB-n
EDC-RWEB-n
EDC-TWEB-n
Location: WestDC
Instance:
WDC-NGINX02
Instance:
WDC-NGINX01 WDC-RWEB-n
WDC-TWEB-n
Referral Team / Pipeline
Transfers Team / Pipeline
Referral
Code
Transfer
Code
Referral
Code
Transfer
Code
Affinitized
Workload
Groups
Affinitized
Workload
Groups
Placement

15. | ©2020 F516
GitHub
ECOSYSTEM PROGRAM
Pipeline Build of Config
Referral
Component
Transfers
Component
Trading
Certificate
Prod
Trading
Trading
Gateway
Referral
Transfers
Gateway

16. Deploy Configurations
FROM DEVELOPMENT TO PRODUCTION

17. | ©2020 F518
Roles in Ansible Galaxy
NGINX OSS / Plus / Unit
Coming soon! NGINX App Protect
Certified Collection in Galaxy and Ansible Automation
Platform
Deploy your NGINX Plus instances with Ansible
Manage your NGINX Plus instances with NGINX Controller
WITH ANSIBLE, NGINX CONTROLLER & NGINX PLUS
CONFIDENTIAL
Automate the Toil, Shorten Release Cycles

19. linkedin.com/company/red-hat
youtube.com/user/RedHatVideos
facebook.com/redhatinc
twitter.com/RedHat
Q&A