Ansible Berlin - After pets v cattle, what next?

Hello everyone!

We'd like to get the Ansible Berlin meet-ups going again, after Dan did such a great job before.

heyjobs.de (my employer) have agreed to host, and supply food and drinks. We're in Kreuzberg, so easy to get to.

As ever, we're looking to the community for volunteers to do talks. Has Ansible exceeded the 'pets v cattle' concept? Anyone branching out with Ansible automation in non-typical use cases? Been working on something interesting over this past year that you'd like to share? Please get in touch.

Agenda:

19:00 - 19:15 A few words of “Welcome to HeyJobs & thanks for coming!”

19:15 - 20:00 Managing Shared Secrets with Ansible/HashiVault by Doug Bridgens
(https://twitter.com/thisdougb)
Being able to easily deploy good intra-application credentials, irrespective of tooling, still seems to be a major challenge. In this presentation I will demo using Ansible and HashiCorp Vault to deploy and rotate application-layer database credentials. And then go one step further and deploy/rotate server certificates.

20:00 - 20:30 break for socialising, beer and pizza.

20:30 - 20:50 Using AWS-roles in Playbooks by Doug Bridgens
(https://twitter.com/thisdougb)
IAM roles in AWS are the best-practice way to delegate permissions. I will show a simple method to switch IAM roles with MFA turned on, which has a very similar effect to Ansible's own 'become_user'.

20:50 - 21:30 ChatOps: Implementing an Ansible Slackbot by Doug Bridgens
(https://twitter.com/thisdougb)
ChatOps with Ansible is not too difficult to implement, especially if you already run Ansible and Tower. Here I'll show you how to connect Slack to Ansible, and a pattern that avoids doing a lot of extra work! We'll also run through a demo of creating a new AWS ECS service from Slack.

21:30 The end.