IBM z/OS Ansible Collections

website·Indexed 30 days ago

https://ibm.github.io/z-devops-acceleration-program/

Documentation for IBM Ansible collections used to manage z/OS and z Systems environments. Includes the ibm.zos_core collection for core z/OS tasks, ibm.zosmf for z/OS Management Facility, ibm.zos_cics, ibm.zos_ims, ibm.zos_sysauto, and zhmc-ansible-modules for Hardware Management Console (HMC) operations including LPAR and CPC management.

Tokens
492.3K
Snippets
1.6K
Records
3.7K
Agent score
74%

What's inside IBM z/OS Ansible Collections

  1. Overview of IBM ZCodeScan features

    IBM ZCodeScan is a static analysis tool for z/OS applications (COBOL and PL/I) that identifies security vulnerabilities (e.g., SQL injection, buffer overflows) and enforces coding best practices. Key features include:

    • Security Vulnerability Scanning: Detects risks like unprotected credentials.
    • Built-in & Custom Rules: Provides standard best-practice rules and allows organization-specific rules via rule model files (e.g., rules-domains.yaml).
    • Real-time Linting: Provides instant feedback within Z Open Editor during editing.
    • Baseline Management: Suppresses known issues to focus on new findings.
    • AI Integration: Uses Model Context Protocol (MCP) to provide scan results to AI Chat clients.
    • CLI Support: Available in IBM Developer for z/OS Enterprise Edition for use in pipelines or workstations.

    Note: ZCodeScan requires COBOL and PL/I programs to be free of syntax errors to be scanned.

  2. Overview of COBOL and PL/I Preprocessor support in IBM Z Open Editor

    IBM Z Open Editor provides preprocessor support for COBOL and PL/I, allowing developers to use custom syntax or non-standard statements that are automatically converted into standard COBOL or PL/I code. This simplifies development when integrating with other technologies that require complex standard language translations.
  3. Overview of the Line Hex Editor

    The Line Hex Editor allows you to view and edit the hexadecimal representation of a sequential data set or PDS member directly in VS Code. Unlike standard text editors that convert source encoding (e.g., EBCDIC) to a local encoding (e.g., UTF-8), the Line Hex Editor maintains the data in its original binary representation throughout the download, edit, and upload lifecycle. This prevents data corruption for binary data modified at the byte level. It provides a side-by-side view of decoded characters and raw hex values, where changes in one are immediately reflected in the other.
  4. Overview of IBM Z Open Editor sample application files

    The sample application includes various mainframe language examples to test editor capabilities:

    • COBOL: SAM1, SAM2 (program logic), SAM1LIB (library resolution), and copybooks (CUSTCOPY, REGISTRS, TRANREC, DATETIME, REPTTOTL).
    • PL/I: PSAM1, PSAM2, PSAM1LIB (library resolution), and include files (BALSTATS, CUSTPLI, DATETIME, REPTTOTL).
    • HLASM: ASAM1 and ASAM2.
    • REXX: RSAM1.
    • JCL: Members for allocation and execution (e.g., ALLOCATE, RUN, PLIALLOC, RUNPSAM1).
    • Data Files: Source data for programs (e.g., CUSTFILE, TRANFILE).
  5. Overview of the gather_password_policy_information playbook

    The gather_password_policy_information playbook is designed to validate a RACF password threshold breach and notify security personnel. It is typically launched by the 1111_invalid_password_limit_exceeded rulebook when a zSecure alert (C2P1111I) is correlated with a RACF ICH408I logon denial.

    The playbook performs the following sequence:

    1. Validates that the ICH408I message refers to the same user as the zSecure alert.
    2. Connects to the z/OS host and executes SETROPTS LIST to retrieve the current RACF password policy.
    3. Renders an HTML notification using a Jinja2 template containing the alert details and policy settings.
    4. Sends the notification via an SMTP server from the AAP controller.
  6. Overview of the IBM Z DevOps CI/CD Pipeline

    The recommended DevOps approach for IBM Z focuses on aligning mainframe tools and practices with enterprise-wide standards to support hybrid applications and Agile development. The foundation of this approach is a CI/CD pipeline that utilizes a Git-based service for source code management and IBM Dependency Based Build (DBB). By using industry-standard tools like Git, Jenkins, and Artifactory, organizations can improve developer productivity, simplify onboarding for new z/OS developers, and enable smaller, high-quality development increments.
  7. Overview of Ansible for IBM Z

    Ansible for IBM Z integrates IBM Z into the Ansible Automation Platform ecosystem. It provides a unified workflow for development and operations automation, specifically focusing on configuration management, provisioning, and application deployment on IBM Z mainframes.
  8. Overview of the Git branching model for mainframe application development

    The recommended Git branching model for mainframe application development is designed to be scalable for teams of various sizes. It utilizes a single, long-living branch and supports both development and release-level builds, including the handling of production environment fixes. This model is supported by the Common Back-end Scripts provided by IBM.
  9. Overview of the IBM z/OSMF Ansible Collection

    The ibm_zosmf Ansible collection provides automation capabilities for IBM Z systems by leveraging z/OSMF RESTful services. It is designed to automate z/OS workflows and the provisioning and management of z/OS middleware and software. This collection is part of the Red Hat Ansible Certified Content for IBM Z.
  10. Overview of REXX language support in IBM Z Open Editor

    Starting with IBM Z Open Editor 1.2.0, IBM Wazi Developer 1.2.0, and IBM Developer for z/OS 15.0.1, REXX development is supported via a Language Server Protocol (LSP) implementation. This integration provides modern IDE features to the REXX programming language to improve development speed and precision.
  11. Overview of Red Hat Ansible Content for IBM Z

    Ansible for IBM Z integrates IBM Z into enterprise automation strategies via the Ansible Automation Platform ecosystem. It provides a unified workflow for configuration management, provisioning, and application deployment, enabling seamless development and operations automation on IBM Z mainframes.
  12. Overview of the ibm_zhmc Ansible collection

    The ibm_zhmc collection provides Ansible modules designed to manage platform resources on IBM Z and LinuxONE machines. It interacts with the Hardware Management Console (HMC) Web Services API using Python. Supported management tasks include lifecycle and configuration operations for partitions, CPU, memory, virtual switches, and I/O adapters.