Upgrade to Pro — share decks privately, control downloads, hide ads and more …

20190720_Better Practice_ Day 2 Operaition with Ansible

20190720_Better Practice_ Day 2 Operaition with Ansible

#ansible

Phil Huang

July 20, 2019
Tweet

More Decks by Phil Huang

Other Decks in Technology

Transcript

  1. Best Better Practice:
    Day 2 Operation with Ansible
    Phil Huang 黃秉鈞
    SDN x Cloud Native Meetup #18, Taiwan, July. 20, 2019

    View full-size slide

  2. # whois Phil Huang 黃秉鈞
    ● 社群斜槓 青年 青壯年
    ○ SDNDS-TW
    ○ Cloud Native Taiwan User Group (CNTUG)
    ● 任職於 Red Hat 擔任 Solution Architect
    ○ Ansible IT Automation
    ○ OpenShift Container Platform
    ○ Software-Defined Networking (SDN)
    ○ Network Function Virtualization (NFV)
    ● Blog
    ○ https://blog.pichuang.com.tw
    Ref: https://www.linkedin.com/in/phil-huang-09b09895/

    View full-size slide

  3. 感謝 Monosapce 共同工作空間 提供場地支持
    Ref: https://monospace.tw/

    View full-size slide

  4. 感謝 台中自由軟體愛好者社群 - TFC 提供社群支持
    Ref: https://www.facebook.com/tfctaiwan

    View full-size slide

  5. Before Starting

    View full-size slide

  6. 閒聊...
    1. Ceph 快起飛了
    2. k8s 多網卡架構
    3. Ansible 的 Logo 小趣事

    View full-size slide

  7. 假設你...
    1. 你知道 Ansible
    2. 你用過 Ansible
    3. 你電腦有裝 Ansible

    View full-size slide

  8. 回顧一下 Ansible 技術概觀介紹_20190130
    Ref: https://speakerdeck.com/pichuang/ansible-ji-shu-gai-guan-jie-shao-20190130

    View full-size slide

  9. Ansible in Real World

    View full-size slide

  10. Q: Ansible 在 IT 架構具體落地是在哪裡?
    Ref: https://www.ibm.com/cloud/blog/end-to-end-application-provisioning-with-ansible-and-terraform

    View full-size slide

  11. A: 堡壘機 (Bastion Host / Jump Server )
    ● 單一管理入口
    ● 權限控管窗口
    ● 雜 Code 放置所
    Ref: 認識 Bastion Host 部署管理機 - Yi Yang

    View full-size slide

  12. 關於 SSH 連線 - ProxyCommand
    Ref: 認識 Bastion Host 部署管理機 - Yi Yang
    Host 10.10.10.*
    ProxyCommand ssh -W %h:%p bastion.pichuang.local
    IdentityFile ~/.ssh/private_key.pem
    Host bastion.pichuang.local
    Hostname bastion.pichuang.local
    User pichuang
    IdentityFile ~/.ssh/private_key.pem
    StrictHostKeyChecking no

    View full-size slide

  13. 到底 ansible.cfg 放在哪裡好?
    A. ANSIBLE_CONFIG (environment variable if set)
    B. ansible.cfg (in the current directory)
    C. ~/.ansible.cfg (in the home directory)
    D. /etc/ansible/ansible.cfg
    Ref: https://docs.ansible.com/ansible/latest/reference_appendices/config.html#the-configuration-file
    個人慣例

    View full-size slide

  14. 是否該維護自己的 ansible.cfg?
    Ref: https://gist.github.com/pichuang/7b1b826595aada062f37eee5ab9852a2#file-ansible-cfg-L13
    ● 就像對待 dotfiles (.bashrc / .vimrc / … )
    ● 常駐外掛: SSH 加速設定
    ● 開了不會後悔的參數
    ● callback_whitelist = profile_tasks
    ● stdout_callback = debug

    View full-size slide

  15. Recap: 三個指令學一下
    ● 檢查環境
    ○ ansible -i hosts all -m ping
    ● 同時下指令 (回想起用 tmux synchronize-panes 的畫面嗎?)
    ○ ansible -i hosts all -m command -a “ls”
    ● Copy 檔案 (回想起用 scp + for 迴圈的日子了嗎?)
    ○ ansible -i hosts all -m copy -a “src=/ooxx dest=/xxoo”

    View full-size slide

  16. Ansible Command v.s. Shell v.s. Raw
    ● Linux
    ○ command > shell > raw
    ● Windows
    ○ win_command > win_shell > raw
    ● Network
    ○ *os_command > raw
    三者參考選擇:
    ● 避免環境變數注入問題,寫 Playbook 時,優選 command
    ● shell 類同於一般打指令
    ○ ansible -m shell -a “xxx | ooo >> $HOME”
    ● raw 在受控機器環境嚴苛狀況下再考慮用 (例如 router)

    View full-size slide

  17. 啥時該寫 Ansible Playbook?
    ● 短時間內需要反覆下同樣的指令
    ● 每日例行公事
    ● Debugging
    ● 分享經驗給其他人
    ○ ansible-galaxy (o)
    ○ git (o)
    ○ svn (o)
    ○ zip (x)
    Check List

    View full-size slide

  18. Q: 如何使用 ansible-playbook 指令?
    A. 直接下指令: ansible-playbook -i hosts ...
    B. shell script + ansible-playbook
    C. makefile + ansible-playbook
    個人慣例

    View full-size slide

  19. A: ansible-playbook 與 {Shell Script, Makefile} 是好友
    $ cat /usr/bin/upgrade.sh
    #!/bin/bash
    ansible-playbook -i hosts /do/not/copy/the/script/upgrade.yml
    $ chmod +x /usr/bin/upgrade.sh
    $ upgrade.sh

    View full-size slide

  20. Ansible v.s. (or +) Terraform (1/2)
    ● Ansible: 單點 Configuration
    ● Terraform: 廣域 Provision

    View full-size slide

  21. Ansible v.s. (or +) Terraform (2/2)

    View full-size slide

  22. IaC 基礎建設即代碼: Git + Ansible 上班撿到槍組合
    Ref: https://about.gitlab.com/community/heroes
    ● 版本控制 >> 多人共用
    ● 地端最多人用 GitLab
    ● 開發流程選擇
    ○ 小型副本: GitHub Flow
    ○ 大型副本: GitLab Flow

    View full-size slide

  23. Ansible 除錯小技巧
    Ref: https://blog.pichuang.com.tw/20190618-ansible-troubleshooting/

    View full-size slide

  24. 思考 Pipeline 心法: Step by Step
    點、線、面

    View full-size slide

  25. Ref: https://www.facebook.com/events/2143280755732051/

    View full-size slide

  26. Ref: http://ansible.tw/#!index.md

    View full-size slide

  27. Ref: https://www.facebook.com/RedHatTaiwan/
    紅帽美女S小編說:

    View full-size slide

  28. Q&A
    台上一小時,台下三日夜
    社群正向回饋,需要一起參與
    Ref: https://www.facebook.com/micomikicat/

    View full-size slide