Little overview of new Ansible 2.0 features. http://www.ansible.com/ http://spblug.org/ https://selectel.ru/

1. ANSIBLE 2.0
SPbLUG
2016/01/27
Константин Новаковский
Selectel

2. Основные улучшения
● Error reporting
● Tasks blocks
● Dynamic Includes
● Variable manager
● Execution Strategy Plugins
○ linear (default)
○ free

3. Blocks
tasks:
- block:
- command: /bin/false
- debug: msg="you shouldn't see me"
rescue:
- debug: msg="this is the rescue"
- command: /bin/false
- debug: msg="you shouldn't see this"
always:
- debug: msg="it will always be seen"
with_items к блокам применять нельзя :(

4. Dynamic Includes
- hosts: localhost
connection: local
gather_facts: no
tasks:
- include: foo.yml some_var={{ item }}
with_items:
- a
- b
- c

5. Execution Strategy Plugins
- hosts: all
gather_facts: no
strategy: free
tasks:
- pause: seconds={{ 10 |random}}
- debug: msg="msg_1"
- pause: seconds={{ 10 |random}}
- debug: msg="msg_2"
- pause: seconds={{ 10 |random}}
- debug: msg="msg_3"

6. Deprecated modules
● ec2_ami_search (ec2_ami_find)
● quantum_network (os_network)
● glance_image
● nova_compute (os_server)
● quantum_floating_ip (os_floating_ip)
● quantum_router (os_router)
● quantum_router_gateway (os_router)
● quantum_router_interface (os_router)

7. Новые модули
● deploy_helper
● cronvar
● expect
● find
● iptables
● pam_limits
● selinux_permissive, seport

8. Новые модули
● consul, consul_acl, consul_kv, consul_session
● rabbitmq_binding, rabbitmq_exchange,
rabbitmq_queue
● zabbix_host, zabbix_hostmacro,
zabbix_screen
● sensu_check
● pear
● puppet

9. Новые модули
● osx_defaults
● dpkg_selections

10. Ещё чуть-чуть
Хорошее:
● New connection: docker
Относительно плохое:
● Plugin API Changes - нужно переписывать
плагины

11. Улучшение поддержки Windows
(win_*)● acl
● dotnet_ngen
● environment
● firewall_rule
● iis_*: virtualdirectory, webapplication, webapppool, webbinding,
website
● lineinfile
● nssm
● regedit
● unzip, package, updates
● scheduled_task
● webpicmd

12. Ещё немного про Ansible
вдруг кто не читал документацию :)

13. ansible.cfg
[defaults]
ansible_managed = Ansible managed.
roles_path = /home/keeper/projects/ansible-roles
hostfile = hosts
jinja2_extensions = jinja2.ext.do,jinja2.ext.loopcontrols
error_on_undefined_vars = True
fact_caching = redis
fact_caching_timeout = 604800
vars_plugins = vars_plugins
timeout = 20
[ssh_connection]
ssh_args = -o ControlMaster=auto -F ~/ssh/ansible_config

14. vars plugins
1. получаем данные сначала из vars_plugins
2. затем из inventory_dir/{group,host}_vars/, они
перекрывают пункт 1
3. затем из playbook_dir/{group,host}_vars/,
перекрывают пункт 2
ansible.cfg:
[defaults]
vars_plugins = vars_plugins:/other/path/to

15. project/
├── common_group_vars/
│ ├── all
│ └── dhcp-servers/
│ └── dhcp
├── pools/
│ ├── testing-alphapool/
│ │ ├── inventory
│ │ └── group_vars/
│ │ └── all
│ └── product-betapool/
│ ....
├── filter_plugins/
├── vars_plugins/
│ └── common_group_vars/
│ └──common_group_vars.py
├── playbook-one.yml
├── playbook-two.yml

16. Filter plugins
$ tree
.
├── filter_plugins
│ ├── merge_hash.py
│ └── toml_filter.py
├── hosts
└── site.yml

17. Filter plugins
def to_toml(a):
''' convert hashes to toml format '''
try:
import toml
except Exception, e:
raise errors.AnsibleFilterError('toml python package not found')
return toml.dumps(a)
class FilterModule(object):
''' some utility filters '''
def filters(self):
return {
'to_toml' : to_toml
}

18. Dynamic inventory
/contrib/inventory:
● ssh_config
● vagrant
● zabbix
● consul
● openstack
● freeipa
● ...

19. Ещё чуть-чуть
● Вместо yaml’а можно использовать JSON
● callback_plugins
● Вместо конструкций
fail_when+changed_when+shell лучше сразу
писать модуль

20. Links
https://github.com/lorin/ansible-quickref
https://habrahabr.ru/company/selectel/blog/270209/
http://www.ansible.com/blog/ansible-2.0-launch
https://github.com/ansible/ansible/blob/devel/CHANGELOG.md
http://docs.ansible.com/ansible/playbooks_blocks.html
http://docs.ansible.com/ansible/playbooks_strategies.html