Ansible Role: ansible-role-thousandeyes-enterprise-agent-linux

Ansible role for Cisco ThousandEyes Enterprise Agent deployment.

Description

Mass deployment and configuration of Linux package ThousandEyes Enterprise Agent via Ansible role.
This Ansible role is automating the manual installation method described on the Enterprise Agent Deployment Using Linux Package Method Knowledge Base article.
The tasks in this Ansible role are inheriting the logic from the official shell installation script and various Knowledge Base articles.

Requirements

• Ansible 2.9
• Supported hosts OS: Ubuntu 20.04/22.04 LTS, RHEL/Oracle Linux 8, Amazon Linux 2. Although not mandatory, all OS minimal server images are preferred.

Installation

Clone the repository into your Ansible roles folder location:

git clone https://github.com/cisco-open/ansible-role-thousandeyes-enterprise-agent-linux.git /path/to/ansible/roles

Role Variables

Before running this role, please review and set the appropriate variables. E.g. vars/main.yml

INSTALL_LOG:

If you save Ansible output to a log, you expose any secret data in your Ansible output, such as passwords and user names.
By default Ansible sends output about plays, tasks, and module arguments to your screen (STDOUT) on the control node.
If you want to capture Ansible output in a log, you have three options.
Visit Logging Ansible output for more details.

Example Playbook

install_thousandeyes.yml

---
- hosts: allagents
  remote_user: ansible
  gather_facts: no
# Uncommenting this line allows each host to run until the end of the play as fast as it can
# strategy: free
  pre_tasks:
    - setup:
        gather_subset:
          - '!all'
          - '!any'
          - hardware
          - virtual
  become: true
  roles:
#    - common
#    - rhel-system-roles.timesync
    - ansible-role-thousandeyes-enterprise-agent-linux
#    - other-roles

Example using Ansible Vault

vars/main.yml contains sensitive information like Account Group token or credentials.

The following example will encrypt the variables file with the password in vault_password_file

ansible-vault encrypt --vault-id thousandeyes@vault_password_file vars/main.yml
ansible-playbook install_thousandeyes.yml --vault-id thousandeyes@vault_password_file

More details:

• Ansible Vault
• Using Vault in playbooks

Todos

The following are work in progress new features :

• Add support for RHEL/Rocky 9
• Add CA root certificates to system certificate store
• Add CA root certificates to Browserbot

Contributing to ansible-role-thousandeyes-enterprise-agent-linux

This project is maintained by the ThousandEyes Customer Engineering team and accepts community contributions.
If you have a bug or an idea, browse the open issues before opening a new issue.

Write bug reports with detail, background, and sample code

Please consider to include the following in a bug report:

• A quick summary and/or background
• Steps to reproduce
  • Be specific!
  • Give sample code if you can.
• What you expected would happen
• What actually happened
• Notes (possibly including why you think this might be happening, or stuff you tried that didn't work)

Any contributions you make will be under the Apache License, Version 2

By contributing, you agree that your contributions will be licensed under its Apache License, Version 2.
In short, when you submit code changes, your submissions are understood to be under the same Apache License that covers the project.
Feel free to contact the maintainers if that's a concern.

License

Copyright (c) 2023 Cisco Systems, Inc. and its affiliates
All rights reserved.