20181210_Ansibleもくもく会_成果LT

1. Ansible with NGINX/Zabbix
Takahiro Kujirai
（Opensourcetech / SubMattNesk）

2. NGINX

3. nginx_status_facts
• 稼働中のNGINXのステータスを取得する
https://docs.ansible.com/ansible/2.5/modules/nginx_status_facts_module.html
https://github.com/ansible/ansible-modules-extras/blob/devel/web_infrastructure/
nginx_status_facts.py

4. • 稼働中のNGINXのステータスを取得する
http://opensourcetech.hatenablog.jp/entry/2018/11/22/
NGINX_Plus%E3%81%AB%E3%82%88%E3%82%8B%E3%83%AA%E3%83%90%E3%83%BC%E3
%82%B9%E3%83%97%E3%83%AD%E3%82%AD%E3%82%B7%E6%A7%8B%E7%AF%89
（NGINX Plusによるリバースプロキシ構築）
（192.168.230.107 TCP81）
構成

5. 取得できる情報
• http://192.168.230.107:81/nginx_status
サーバへのアクティブ接続数、リクエスト数などを確認できる。
http://nginx.org/en/docs/http/ngx_http_stub_status_module.html
192.168.230.107:81

6. nginx.conf
[root@localhost ~]# cat -n /etc/nginx/nginx.conf
14 http {
（省略）
34 upstream nginx_containers {
35 least_time header;
36 #least_time last_byte;
37 #least_time connect;
38 #least_time first_byte;
39 server localhost:8081;
40 server localhost:8082;
41 server localhost:8083;
42 }
43
44 server {
45 listen 81;
46 location / {
47 proxy_pass http://nginx_containers;
48 proxy_http_version 1.1;
49 proxy_set_header Host $host:$server_port;
50 proxy_set_header X-FOrwarded-For $proxy_add_x_forwarded_for;
51 proxy_set_header X-Forwarded-Proto http;
52 proxy_ignore_client_abort on;
53 }
54 location /nginx_status {
55 stub_status on;
56 allow all;
57 }
58 }
59 }
バックエンド設定
フロントエンド設定
Status取得設定

7. /etc/ansible/ansible.cfg
[defaults]
host_key_checking = False
retry_files_enabled = False
ask_pass = True
[persistent_connection]
command_timeout = 30
connect_timeout = 60

8. /etc/ansible/hosts
192.168.230.107

9. playbook
---
- hosts: 192.168.230.107
user: root
tasks:
- name: Get Nginx Status(stub_status)
nginx_status_facts:
url: http://192.168.230.107:81/nginx_status
timeout: 20
register: nginx_status
- debug: var=nginx_status

10. 実行結果
やってみます！！

11. 実行結果
XYZ:ansible_test Yoshiki$ ansible-playbook nginx_stub_status.yaml
SSH password:
PLAY [192.168.230.107] ***********************************************************
TASK [Gathering Facts] *********************************************************
ok: [192.168.230.107]
TASK [Get Nginx Status(stub_status)] *******************************************
ok: [192.168.230.107]
TASK [debug] *******************************************************************
ok: [192.168.230.107] => {
"nginx_status": {
"ansible_facts": {
"nginx_status_facts": {
"accepts": 21,
"active_connections": 1,
"data": "Active connections: 1 nserver accepts handled requestsn 21 21 31 nReading: 0 Writing: 1 Waiting: 0 n",
"handled": 21,
"reading": 0,
"requests": 31,
"waiting": 0,
"writing": 1
}
},
"changed": false,
"failed": false
}
}
PLAY RECAP *********************************************************************
192.168.230.107 : ok=3 changed=0 unreachable=0 failed=0 skipped=0

12. ハマったこと
ü 対象サーバ（NGINX on CentOS7）へどうやって SSHやるんだ？
→ Playbookに 「host:」と「user:」 、/etc/ansible/hostsにIPアドレスな
どを記載すればOK！
ü SSHを秘密鍵じゃなく、パスワードで認証したいんだが？
→ ansible.cfgに「ask_pass = True」って書けばOK！
ü 「nginx_status_factsを使ったぜ！」情報、ないかな？
→ほぼ、なしw なので、書きます！！
http://opensourcetech.hatenablog.jp/

13. Zabbix

14. zabbix_host
• 監視対象ホストを追加/更新/削除する
https://docs.ansible.com/ansible/2.5/modules/zabbix_host_module.html

15. zabbix-apiが必要
XYZ:ansible_test Yoshiki$ ansible-playbook zabbix.yaml
SSH password:
PLAY [192.168.230.107] *********************************************************
TASK [Gathering Facts] *********************************************************
ok: [192.168.230.107]
TASK [Add zabbix host] *********************************************************
fatal: [192.168.230.107 -> localhost]: FAILED! => {"changed": false, "msg": "Missing required ********-api
module (check docs or install with: pip install ********-api)"}
PLAY RECAP *********************************************************************
192.168.230.107 : ok=1 changed=0 unreachable=0 failed=1 skipped=0

16. zabbix-apiが必要
XYZ:ansible_test Yoshiki$ pip install zabbix-api
Collecting zabbix-api
Downloading https://files.pythonhosted.org/packages/2a/f3/
c261c6d7517acbb19bb76e9ff4721a8adda79be7e09218331603baeef145/zabbix-api-0.5.3.tar.gz
Building wheels for collected packages: zabbix-api
Running setup.py bdist_wheel for zabbix-api ... done
Stored in directory: /Users/kujiraitakahiro/Library/Caches/pip/wheels/b3/c5/ba/
a91c17c637178c2b182a6f199cda8904f34626490ad11a4634
Successfully built zabbix-api
Installing collected packages: zabbix-api
Successfully installed zabbix-api-0.5.3
XYZ:ansible_test Yoshiki$ pip list | grep zabbix
zabbix-api 0.5.3

17. playbook
---
- hosts: 192.168.230.107
user: root
tasks:
- name: Add zabbix host
local_action:
module: zabbix_host
login_user: Admin
login_password: zabbix
server_url: http://192.168.230.107/zabbix
timeout: 20
host_name: "NGINX"
host_groups:
- NGINX
status: enabled
state: present
interfaces:
- type: 1
main: 1
useip: 1
ip: 192.168.230.107
dns: ""
port: 10050
register: zabbix_status
- debug: var=zabbix_status

18. 実行結果
XYZ:ansible_test Yoshiki$ ansible-playbook zabbix.yaml
SSH password:
PLAY [192.168.230.107] ************************************************************
TASK [Gathering Facts] *********************************************************
ok: [192.168.230.107]
TASK [Add zabbix host] *********************************************************
changed: [192.168.230.107 -> localhost]
TASK [debug] *******************************************************************
ok: [192.168.230.107] => {
"zabbix_status": {
"changed": true,
"failed": false,
"result": "Successfully update host NGINX (192.168.230.107) and linked with template 'None'"
}
}
PLAY RECAP *********************************************************************
192.168.230.107 : ok=3 changed=1 unreachable=0 failed=0 skipped=0

19. 実行結果
ホストが追加された！