# Ansible + CMDB Integration Guide

## Overview

Ansible can auto-discover infrastructure and register it as CIs in the CMDB.

## Setup

1. Install `ansible` and `requests` on your control node
2. Get a CMDB API token: `curl -X POST .../api/auth/login -d '{"username":"admin","password":"..."}'`
3. Set `CMDB_TOKEN` and `CMDB_URL` in your inventory

## Playbook: Import Hosts

```yaml
# playbooks/cmdb-sync.yml
---
- name: Sync Ansible inventory to CMDB
  hosts: all
  gather_facts: true
  vars:
    cmdb_url: "http://cmdb-host:8000/api"
    cmdb_token: "{{ lookup('env', 'CMDB_TOKEN') }}"

  tasks:
    - name: Register host as CI
      uri:
        url: "{{ cmdb_url }}/ci"
        method: POST
        headers:
          Authorization: "Bearer {{ cmdb_token }}"
          Content-Type: "application/json"
        body_format: json
        body:
          name: "{{ inventory_hostname }}"
          ci_type_name: "{% if 'proxmox' in inventory_hostname %}PhysicalServer{% elif 'vm-' in inventory_hostname %}VirtualMachine{% else %}Application{% endif %}"
          status: active
          tags: "{{ group_names }}"
          attributes:
            os: "{{ ansible_distribution }} {{ ansible_distribution_version }}"
            cpu_cores: "{{ ansible_processor_vcpus }}"
            ram_mb: "{{ ansible_memtotal_mb }}"
            ip: "{{ ansible_default_ipv4.address | default('N/A') }}"
            kernel: "{{ ansible_kernel }}"
            hostname: "{{ ansible_hostname }}"
        status_code: [201, 409]
      register: cmdb_result

    - name: Show result
      debug:
        msg: "{{ inventory_hostname }} → {{ cmdb_result.status }}"
```

## Playbook: Update Software Versions

```yaml
- name: Update software instances in CMDB
  hosts: all
  tasks:
    - name: Get installed packages
      package_facts:
      become: true

    - name: Report key packages to CMDB
      uri:
        url: "{{ cmdb_url }}/ci/bulk/import"
        method: POST
        headers:
          Authorization: "Bearer {{ cmdb_token }}"
        body_format: json
        body:
          items: >-
            {{
              package_facts.packages.keys() | select('search', 'nginx|docker|postgresql|redis|prometheus') |
              map(attribute='-', {
                'name': item,
                'ci_type_name': 'Application',
                'attributes': {'version': package_facts.packages[item].version}
              }) | list
            }}
        status_code: [201]
      when: "'nginx' in package_facts.packages or 'docker-ce' in package_facts.packages"
```

## Best Practices

1. **Idempotent registration** — use 409 handling to update existing CIs
2. **Tag with inventory groups** — auto-tag CIs with Ansible group names
3. **Schedule via cron** — `0 */6 * * * ansible-playbook cmdb-sync.yml`
4. **Use lookup plugins** — `uri` plugin for API calls
5. **Store token securely** — use Ansible Vault for `CMDB_TOKEN`