Chapter 3. Remediating issues on RHEL systems managed by Satellite
Use Insights to create a remediations playbook, and execute that playbook on your Satellite systems from the Insights UI.
3.1. Using Insights to create a remediations playbook
You can use Insights to create an Ansible Playbook for system remediation across your Satellite infrastructure.
- Log in to your cloud.redhat.com account and open Red Hat Insights.
Perform one of the following actions to see what fixes are available.
Click the Advisor > Recommendations > Recommendations tab to view a list of the recommended fixes.Note
Verify that the selected remediation item has a green check mark in the Ansible column, which means you create an Ansible Playbook to remediate the issue.
- Click the Vulnerability > CVEs tab to view a list of CVEs.
After selecting Advisor > Recommendations or Vulnerability > CVEs, click on one of the listed remediation items.
An Affected systems list appears that shows you which systems might need the remediation applied.
- From the list, click the check box to select the systems you want to remediate. When you select the systems, the Ansible Remediate button becomes active.
- Click the Ansible Remediate button to create an Ansible Playbook. You can choose to create a new playbook or modify an existing playbook.
3.2. Executing the remediations playbook
You can execute an Ansible Playbook that you created to apply remediations to your Satellite-managed systems.
Only users who are assigned the Remediations administrator role can execute an Ansible Playbook. For information on how to manage and assign user roles, see the User Access Configuration Guide for Red Hat Insights.
- Navigate to Insights > Remediations. A list of available playbooks appears.
- Click the name of the playbook that you want to execute. A summary window displays information about the actions in the playbook.
In the summary window you can switch states of the auto reboot. If it is enabled you can turn it off and if it is disabled you can turn it on.Note
The selection to Turn off auto reboot applies to the playbook and not individual systems. If multiple systems use the playbook, the auto reboot choice of enabled or disabled applies to all systems and cannot be individually toggled.
- (Optional) You can select specific actions in the confirmation window and delete them.
- Click the Execute Playbook button. A confirmation window appears and asks for a final confirmation to execute the playbook. You can view the readiness state for the target systems.
- In the confirmation window, click the button Execute Playbook on X systems to start running the playbook. The X represents the number of systems.
3.3. Using Insights to monitor remediation status
You can view the remediation status for each playbook that you execute from the Insights Remediations service. The status information tells you the results of the latest activity and provides a summary of all activity for playbook execution. You can also view log information for playbook execution.
- Create and execute a remediation playbook.
- In the Red Hat Insights application, click the Remediations tab. The tab window displays a list of remediation playbooks.
- Click on the name of a playbook. Additional choices are displayed for the latest playbook activity and all playbook activity.
- Click View in the Playbook summary area to see results of the latest activity for the playbook execution.
- Click the Activity tab to see information about all activity for the playbook.
- When you hover on any item in the Status column, a pop-up box appears with summary information for Run, Failed, and Pending activity.
- Click the expand button next to a Run on entry to show additional activity for each connection on that run. A "Results by connection" window appears.
- Under the Connection heading, click a connection name. A Name list appears.
Click on the expand button next to an entry in the Name list. A Playbook log appears.Note
You can view the Playbook log while a playbook is executing to see near real time information on the execution status.
To monitor the status of a playbook in the Satellite web UI, see Monitoring Remote Jobs in the Red Hat Satellite Managing Hosts guide.