SOP – User Hardening Automation
1. Objective
To automate Aerospike user hardening by removing unwanted users from the target clusters using the approved Ansible playbook.
2. Prerequisites
- Access to Jenkins and AWX.
- Required AWX Job Template and Ansible playbook are available.
- Target cluster primary nodes are configured in the inventory.
- Required user-hardening details are validated.
- Necessary credentials are configured in AWX/Jenkins.
3. Link to Template
| Environment | AWX Template |
|---|---|
| DEV | |
| UAT | |
| PROD | |
4. Component / Extra Variables
The following variables need to be passed during execution:
| Variable | Description | Mandatory |
|---|---|---|
cluster_name |
Target Aerospike cluster name | Yes |
roles |
Roles applicable for the user hardening | Yes |
username |
User to be hardened/removed | As applicable |
Note:
cluster_nameandrolesmust not be empty.
5. Procedure
5.1 AWX
- Open the respective AWX Job Template.
- Select the required environment/inventory.
- Provide the required Extra Variables.
- Verify the target cluster and parameters.
- Launch the job.
- Verify the job execution and result.
5.2 Jenkins
- Open the User Hardening Jenkins Job.
- Select/provide the required parameters.
- Verify
cluster_name,roles, and other mandatory inputs. - Trigger the Jenkins job.
- Jenkins invokes the configured AWX/Ansible Job Template.
- Verify the Jenkins and AWX execution status.