So, in this video, we will cover the basics of configuration management with Red Hat Satellite. System configuration in Satellite enables users to define the desired state of systems. You tell Satellite the desired end state and Satellite figures out the best way to get there. This means that administrators don't have to write scripts for each action. Satellite understands which tools to use based on the IT environment. It can also be used to manage and make changes and create new desired states. Once that desired state is defined you want it to stay that way, mainly for security reasons. In the event that the desired state changes admins need a way to figure out what changed and how to remediate the drift. If differences are detected Satellite will remediate and return that system to the desired state. Types of change that can be different might include the contents of a config file, or a previously running service that has stopped. Not only does Satellite help set and maintain the desired state, it keeps reports of when and what changes are made. Every check-in for every system is kept. Most of the time they're boring and empty. However, if a change was made, it's documented and provides a very clear audit trail of changes. In the demo we'll set up our host to use Ansible roles, and we'll use Ansible to install the Red Hat Insights client. Configuration management isn't just a Satellite feature, but the use of a configuration tool, like Ansible or Puppet, along with Satellite. Ansible and Puppet are our two primary configuration management providers in Satellite. During this demo I'll show you how Ansible can be used for configuration management, starting with Satellite 6.4. We're here on the dashboard, and I want to explicitly point out the Red Hat [Insights] Risk Summary and Red Hat Insights Actions graphs. They're both empty; that's because there's no inventory members currently present. If I go to "Insights", "Inventory", we'll see that there are no hosts. As part of this demo we will select Ansible roles and add them to host groups. And at the end of the demo all the hosts will have the Insights clients installed and registered. We do have, in this environment, we're up to nine different hosts, we've added a few more. I'm at my Satellite CLI and I just want to point out that we have enabled the Red Hat Ansible Engine repo. This is where we get our system roles from. Since this is enabled on the Satellite environment I'll be able to see it inside of the Satellite UI. So, I will go to "Configure", "Ansible", "Roles." No roles have currently been imported, so I'll select from sat.example.com, and here's a list of all of the Ansible roles that I have available to me. I will select them all and click Update. Now that we have the Ansible roles added we're going to add them into a host group. "Configure", "Host Groups", and I'm gonna use my RHEL 7 host group. If I click on the Ansible Roles tab I can select a couple of these roles, so I'll do the Insights client as well as Time Sync, and I'll Submit. So, now my host group contains those Ansible roles, let's apply these to the hosts. "Host", "All Hosts", and I will select all of my hosts, select Action and at the bottom Play Ansible roles. And when this host's completed, we've played the Ansible roles, which will have added the Insights client as well as sync the time on all nine of these hosts. We can check this by going to "Monitor", "Tasks", and we can see the remote action, that was run by Ansible, on each one of these hosts. To further confirm, we'll go the "Insights", and then "Inventory" page, and all hosts are now listed, and you can see that there are actions available, risks that were detected for each of the hosts. One last check, I'll go back to my monitor, to the dashboard, and we can see that info has been populated on the dashboard graphs for Insights. So, we have nine systems with risks, now critical risks and a total of 15 different actions that we can take against these hosts that Insights has detected. So, in this video we took hosts, we set up Ansible roles, and we applied those Ansible roles against the hosts, installing the Insights client and synchronizing the time. In the future, if the client gets uninstalled for some reason or if the time goes out of sync, Insights will automatically replay those roles and will make sure that everything is in sync. That concludes this video. We'll see you on the next one.