forked from jimoq/AnsibleFest2020-Demos
-
Notifications
You must be signed in to change notification settings - Fork 4
/
UseCaseB.yml
26 lines (25 loc) · 1.05 KB
/
UseCaseB.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
---
- name: Build an inventory
hosts: localhost
connection: local
gather_facts: no
tasks:
- name: Create a dynamic inventory
add_host:
hostname: "{{ lookup('env','VAR_mgmt_hostname') }}"
ansible_host: "{{ lookup('env','VAR_mgmt_IP') }}"
# Credentials for cp_mgmt* modules and Settings for the Check Point httpapi plugin that provides methods to connect to Checkpoint devices over a HTTP(S)-based api.
ansible_httpapi_use_ssl: True
ansible_httpapi_validate_certs: False
ansible_network_os: check_point.mgmt.checkpoint
ansible_checkpoint_domain: SMC User
#ansible_user: "{{ lookup('env','VAR_mgmt_api_user') }}"
#ansible_ssh_pass: "{{ lookup('env','VAR_mgmt_api_password') }}"
ansible_api_key: "{{ lookup('env','VAR_mgmt_api_key') }}"
groups: Check_Point
- name: Security Orchestration, Automation and Response - Identify reconnaissance attacks
hosts: "{{ lookup('env','VAR_mgmt_hostname') }}"
connection: httpapi
gather_facts: no
roles:
- role: roles/chkp_soar