Differences between revisions 7 and 8
Revision 7 as of 2021-05-20 21:41:09
Size: 1622
Editor: PieterSmit
Comment:
Revision 8 as of 2021-09-13 01:15:47
Size: 1730
Editor: PieterSmit
Comment:
Deletions are marked like this. Additions are marked like this.
Line 28: Line 28:
  {{{
$ ANSIBLE_VAULT_PASSWORD_FILE="~/.ansible-vault-password" ansible-vault encrypt secrets.auto.tfvars
}}}

Ansible

  • DevOps automation framework.

  • What makes Ansible unique is not host agent, all done through ssh.

Ansible module ping host

  • ping/test connectivity, create inventory file, and run module ping.

    vi inventory.file
    [mygrp]
    myserver
    
    ansible mygrp -i inventory.file -m ping
  • Ansible module setup return facts about a host

    ansible myserver -i inventory.file -m setup
    
    #Note: add "--tree /tmp/facts" to get facts from multiple servers in groupe, indexed by host
    cat /tmp/facts/* | jq '.ansible_facts | .ansible_fqdn + ", " + .ansible_distribution + ", python:"+.ansible_python_version +", IP:" + ( .ansible_all_ipv4_addresses   | join(",")  ) '
    
    #or
     jq 'if( .unreachable == true ) then ( input_filename +" <<Missing data" ) else ( .ansible_facts | .ansible_fqdn + ", " + .ansible_distribution + ", python:"+.ansible_python_version +", IP:" + ( .ansible_all_ipv4_addresses   | join(",")  ) ) end ' /tmp/facts/*

Encrypt/Decrypt secrets with ansible-vault before saving in git

$ ANSIBLE_VAULT_PASSWORD_FILE="~/.ansible-vault-password" ansible-vault encrypt secrets.auto.tfvars

Ansible error's

  • 2020-09 [WARNING]: Unable to parse <file> as an inventory source

    • Debug with

      ansible --list-hosts all -i <file> -vvv
      • error seen "Skipping due to inventory source not existing or not being readable by the current user"
      • Apparently ansible tries to parse inventory files with different plugins, ini, yaml, etc.

Ansible (last edited 2023-09-06 00:52:04 by PieterSmit)