Download as PDF, PPTX
![Inventory: Static
[my_hosts]
host1.example.com
host2.example.com
[webservers]
www1.example.com
www2.example.com
[dbs]
db1.example.com
db2.example.com](https://image.slidesharecdn.com/gettingstartedwithansible1-150518182413-lva1-app6891/85/Getting-Started-with-Ansible-26-320.jpg)
![3 types of vars
Lists:
a_list: [‘one’, ‘two’, ‘three’]
another: [1, 2, 3]](https://image.slidesharecdn.com/gettingstartedwithansible1-150518182413-lva1-app6891/85/Getting-Started-with-Ansible-43-320.jpg)
![3 types of vars
Combining them together
my_var: “Here”
complex: [
{ “key”: “value”, },
{ “key”: “blah”, },
{ “key”: my_var },
]](https://image.slidesharecdn.com/gettingstartedwithansible1-150518182413-lva1-app6891/85/Getting-Started-with-Ansible-45-320.jpg)
![Jinja templating for vars
Use “{{ <var> }}” to access variables
{{ my_var }}
{{ my_list[0] }}
{{ my_hash[“key”] }}](https://image.slidesharecdn.com/gettingstartedwithansible1-150518182413-lva1-app6891/85/Getting-Started-with-Ansible-46-320.jpg)
![Variables Files: webserver
index_page: index.html
domains: [
‘example.com’,
‘www.example.com’
]
server_names: “{{ domains|join(‘ ‘) }}”
vhost_root_dir: “/usr/local/www/{{ domains[0] }}
/htdocs”](https://image.slidesharecdn.com/gettingstartedwithansible1-150518182413-lva1-app6891/85/Getting-Started-with-Ansible-70-320.jpg)
More Related Content
Similar to Getting Started with Ansible
Getting Started with Ansible
- 1.
- 2. Who Am I? Opsat Prevoty Former SRE @Twitter and Sys Adm at Eucalyptus
- 3. What We’ll Discuss WhyAnsible? The basics of Ansible Moving past the basics
- 4. Ansible is anIT automation tool. It can configure systems, deploy software, and orchestrate more advanced IT tasks such as continuous deployments or zero downtime rolling updates. http://docs.ansible.com/
- 5.
- 6. One Tool, MultipleJobs Ad-hoc commands Configuration Management Deployments
- 7.
- 8. Agentless Cloud native Great forad-hoc commands SSH based
- 9.
- 10. Idempotent Well mostly… Allows youto run most modules multiple times without fear
- 11.
- 12. Extensible Large community Lots ofprebuilt modules (100s) Easy to build custom modules Modules are “Polygot”
- 13.
- 14. Simple Syntax based onYAML Quick and easy setup Tasks are executed in the order written
- 15.
- 16. 1. Setup nginxrepo 2. Install nginx 3. Configure vhost 4. Copy over the site files
- 17. 2. Install nginx 1.Setup nginx repo 4. Copy over the site files 3. Configure vhost
- 18. 2. Install nginx 1.Setup nginx repo 4. Copy over the site files 3. Configure nginx
- 19. 2. Install nginx 1.Setup nginx repo 4. Copy over the site files 3. Configure nginx
- 20. 2. Install nginx 1.Setup nginx repo 4. Copy over the site files 3. Configure nginx
- 21.
- 22. Installation: Packages $ pipinstall ansible # yum install ansible # aptitude install ansible $ brew install ansible
- 23. Installation: Source $ gitclone > https://github.com/ansible/ansible $ source ansible/hacking/env-setup
- 24.
- 25. Inventory A list ofsystems built into groups Either static or dynamic
- 26.
- 27. Inventory: Dynamic Builds aJSON inventory of hosts Provided: AWS, GCE, Azure, OpenStack, VMWare, Rackspace, Linode, Digital Ocean, Cobbler, Vagrant, Fleet, Consul, ...
- 28. Run an ad-hoctask
- 29. Run an ad-hoctask $ ansible -i <inventory> > -m <module> > -a <args> > <hosts_identifier>
- 30. Run an ad-hoctask $ ansible -i my_inventory > -m ping > all
- 31. But what ifI want to run a command often or multiple commands?
- 32.
- 33. --- - hosts: tag_service_web_server vars: -local_dir: “/myapp” - dest_dir: “/var/www” tasks: - name: Install nginx yum: name=nginx.x86_64 state=present - name: Start nginx service: name=nginx state=started - name: Copy over the app copy: src={{ local_dir }} dest={{ dest_dir }} recursive=yes owner=nginx mode=0644 directory_mode=yes
- 34.
- 35.
- 36. --- - hosts: tag_service_web_server vars: -local_dir: “/myapp” - dest_dir: “/var/www” tasks: - name: Install nginx yum: name=nginx.x86_64 state=present - name: Start nginx service: name=nginx state=started - name: Copy over the app copy: src={{ local_dir }} dest={{ dest_dir }} recursive=yes owner=nginx mode=0644 directory_mode=yes
- 37. Hosts Allows you tospecify groups of hosts Uses the provided inventory
- 38.
- 39. --- - hosts: tag_service_web_server vars: -local_dir: “/myapp” - dest_dir: “/var/www” tasks: - name: Install nginx yum: name=nginx.x86_64 state=present - name: Start nginx service: name=nginx state=started - name: Copy over the app copy: src={{ local_dir }} dest={{ dest_dir }} recursive=yes owner=nginx mode=0644 directory_mode=yes
- 40. Vars Allows you todynamically change values Can be used in playbooks and templates Different types of variables for different workloads
- 41. Vars: Runtime You canadd variables from the CLI at runtime Runtime variables take precedence $ ansible-playbook -i <inventory> > -e key1=value1 playbook.yml
- 42. 3 types ofvars Standard: my_str: “my string” my_num: 1 my_float: 1.234923409 my_bool: false* * booleans also allow “yes” and “no”
- 43. 3 types ofvars Lists: a_list: [‘one’, ‘two’, ‘three’] another: [1, 2, 3]
- 44. 3 types ofvars Hashes (Dictionaries): a_hash: { “key”: “value”, } hashing_it_up: { “such”: “wow”, “chosen”: 1, }
- 45. 3 types ofvars Combining them together my_var: “Here” complex: [ { “key”: “value”, }, { “key”: “blah”, }, { “key”: my_var }, ]
- 46. Jinja templating forvars Use “{{ <var> }}” to access variables {{ my_var }} {{ my_list[0] }} {{ my_hash[“key”] }}
- 47.
- 48. --- - hosts: tag_service_web_server vars: -local_dir: “/myapp” - dest_dir: “/var/www” tasks: - name: Install nginx yum: name=nginx.x86_64 state=present - name: Start nginx service: name=nginx state=started - name: Copy over the app copy: src={{ local_dir }} dest={{ dest_dir }} recursive=yes owner=nginx mode=0644 directory_mode=yes
- 49. Tasks Uses modules tocomplete tasks 100s of prebuilt modules Examples: template, copy, yum, apt, pip, ec2, elb, docker Can use custom modules in tasks too
- 50.
- 51. Tasks Optional: name, become, become_user, connection,delegate_to, etc
- 52. Tasks Example: - name: Installnginx become: yes yum: name=nginx state=latest
- 53.
- 54.
- 55. Loops Allows for cyclingthrough items in a task with_items, with_nested, with_dict, etc
- 56.
- 57. Loops - name: Installnginx yum: name=nginx.x86_64 state=latest - name: Install php5 yum: name=php5.x86_64 state=latest - name: Install Laravel yum: name=php5-laravel.x86_64 state=latest
- 58. Loops - name: Installpackages yum: name={{ item }} state=latest with_items: - nginx.x86_64 - php5.x86_64 - php5-laravel.x86_64
- 59. Loops - name: Installpackages yum: name={{ item.name }} state={{ item.ver }} with_items: - { “name”: ”nginx.x86_64”, “ver”: ”latest” } - { “name”: ”php5.x86_64”, “ver”: ”5.4-1” } - { “name”: ”php5-laravel.x86_64”, ver”: ”5.4-123-1” }
- 60.
- 61. Conditionals Allows you torun tasks only when constraints are met when
- 62.
- 63. Conditionals - name: Installnginx yum: name=nginx.x86_64 state=latest But what if we want to also use a Deb based distro?
- 64. Conditionals - name: Installnginx (RH) yum: name=nginx.x86_64 state=latest when: ansible_os_family == “RedHat” - name: Install nginx (Deb) apt: name=nginx state=latest when: ansible_os_family == “Debian”
- 65.
- 66. Variables Files Just filesfull of variables… Makes using a large number of variables easier Cleans up your playbooks
- 67. Variables Files Multiple level: -Site - Group - Host
- 68. Variables Files Site /Groups: Best practice to place in a group_vars dir group_vars/all for site vars group_vars/<group_name> for groups
- 69. Variables Files Hosts: Best practiceto place in a host_vars dir host_vars/<hostname>
- 70. Variables Files: webserver index_page:index.html domains: [ ‘example.com’, ‘www.example.com’ ] server_names: “{{ domains|join(‘ ‘) }}” vhost_root_dir: “/usr/local/www/{{ domains[0] }} /htdocs”
- 71. Variables Files - hosts:webservers vars_files: - group_vars/all - group_vars/webservers tasks: - name: Install nginx yum: name=nginx state=latest
- 72.
- 73. Roles Used as away to organize playbooks Allows for portability and reuse
- 74. Roles Download roles fromthe community at https://galaxy.ansible.com/ Use ansible-galaxy CLI too
- 75.
- 76. Roles Create this directorystructure easily $ ansible-galaxy init <role_name>
- 77. Roles By default themain.yml file will be run Can create multiple playbooks in a role
- 78. Roles: webserver.yml hosts: webservers vars_files: -group_vars/all - group_vars/webservers roles: - nginx
- 79.
- 80. Roles: templates/nginx.conf http { index{{ index_page }}; server { server_name {{ server_names }}; access_log logs/{{ main_domain }}.access.log main; root {{ vhost_root_dir }}; } }
- 81. Roles: tasks/redhat.yml --- - name:Install nginx yum: name=nginx state=latest notify: - start nginx - enable nginx
- 82. Roles: tasks/debian.yml --- - name:Install nginx apt: name=nginx state=latest notify: - start nginx - enable nginx
- 83. Roles: tasks/main.yml --- - include:redhat.yml when: ansible_os_family == “RedHat” - include: debian.yml when: ansible_os_family == “Debian" - name: Copy over the nginx.conf template template: src=nginx.conf dest=/etc/nginx/nginx.conf notify: restart nginx
- 84. Roles: handlers/main.yml --- - include:redhat.yml when: ansible_os_family == “RedHat” - include: debian.yml when: ansible_os_family == “Debian” - name: start nginx service: name=nginx state=started - name: restart nginx service: name=nginx state=restarted
- 85. Roles: handlers/redhat.yml --- - name:enable nginx service: name=nginx enabled=yes
- 86. Roles: handlers/debian.yml --- - name:enable nginx command: update-rc.d nginx enable
- 87.
- 88.
- 89. Secrets Builtin support forusing AES256 encrypted variables files Files kept in group_vars files for easy access Pass in password at execution
- 90. Secrets ansible-vault CLI tool Easyto edit, view, encrypt, decrypt, create and rekey files
- 91. Secrets ansible-playbook --ask-vault-pass … ansible-playbook--vault-password-file ...
- 92.