Configuration Compliance check via API

Question

hi, is there any way to kick off the configuration compliance check task using API or Ansible module ?
Idea here is as follows:
- we add new device's iDrac to OME using the Ansible automation
- change root pwd - ansible module
- python script to discover the device

Now plan is to have OME configuration template assigned to all iDrac servers group inside OME.
Once the new iDrac is part of the OME inventory, kick off the Configuration compliance check using script/module/API to remediate the template settings and set iDrac to standard
thanks

DELL-Erman O · Answer

Hello,I'm not sure if this can be done with Ansible automation and the playbook you will use. But I want to share these below links. Please check this user guide and github website https://dell.to/34p9oV9 96eb-ece8d456a566 & lang = en-us also github website https://dell.to/3lc8EthHope this helps and have a great one.

mtalas · Answer

Hello, i checked the guide but im not able to find anything related to Configuration Templates. Would you be able to hint me what to look for ?

I checked the OpenManage Enterprise Version 3.4.1 and OpenManage Enterprise - Modular Edition Version 1.20.00 which i suppose is the latest info on OME API but no luck either

Basically looking for the REST API call to :
- initiate Configuration data collection on single or multiple iDracs
- initiate Compliance check against the Configuration Template
- initiate Remediation process of the non-compliant devices

thanks

marek

DellEMCSupport · Answer

Hi, would you be able to check this out? This might help. https://dell.to/30EUc5h

mtalas · Answer

Hi, yes i checked that repo - and actually i already use one python script from there to discover device in OME. Unfortunately i cant find any script related to Configuration Inventory management

marek

DELL-Erman O · Answer

Hi, I did some research and I couldn't find out anything. Let me escalate this topic, we'll see is there any way to chance to do it or not.

DELL-Erman O · Answer

Hi again,

I got some answers and sharing with you as below. I hope these help;

This means that Ansible plugin to make a call to do something against OM Enterprise.
There are still some limitations here. Based on 3 things wants to do:

1) initiate Configuration data collection on single or multiple iDracs
Cleanest way to do this is the make a POST to /api/JobService/Actions/JobService.RunJobs against the Job ID of their config inventory job. Or to wait for the daily run of it.

2) initiate Compliance check against the Configuration Template
So there is no manual Compliance check for Config baselines. But it automatically runs compliance when you add/remove devices from it though so this should already be done when they add something to the config baseline.

3) initiate Remediation process of the non-compliant devices
There already is a pre-existing playbook for Ansible to deploy templates called ome_template to do this part.

Dell OpenManage Enterprise

Configuration Compliance check via API

Was this post helpful?