Ansible Capsule, our off-line CI/CD strategy

How can we ensure consistent deployment of our applications for customers who have an internal infrastructure disconnected from the Internet? The solution we’ve implemented is based on a Docker image that contains the playbook, inventory and Ansible roles, and that self-deploys on our customers’ servers. This is what we call an Ansible capsule. All our applications are packaged in Docker images, and our customers synchronise our private registry with their internal registry. They are then free to deploy as they wish.