Automatisieren mit Ansible

Automatisieren mit Ansible Simon Olofsson • Content Management AG @solofs
• [email protected]

Inventory Control Machine Ad-Hoc Commands A SSH B C D
A B C D Webserver Datenbankserver

% cat /etc/ansible/hosts [web] a.web.service b.web.service c.web.service d.web.service [db] [a:d].db.service

% ansible web -m ping % ansible a.db.service -m ping

% ansible db -a “shutdown -h now” -f 2

apt - Manages apt-packages assemble - Assembles a configuration file
from fragments azure - create or terminate a virtual machine in azure bigip_pool_member (E) - Manages F5 BIG-IP LTM pool members command - Executes a command on a remote node copy - Copies files to remote locations. docker - manage docker containers ec2 - create, terminate, start or stop an instance in ec2, return instanceid fetch - Fetches a file from remote nodes gce - create or terminate GCE instances git - Deploy software (or files) from git checkouts github_hooks (E) - Manages github service hooks. irc (E) - Send a message to an IRC channel jira (E) - create and modify issues in a JIRA instance mysql_db - Add or remove MySQL databases from a remote host. nagios (E) - Perform common tasks in Nagios related to downtime and notifications. postgresql_db - Add or remove PostgreSQL databases from a remote host. win_msi - Installs and uninstalls Windows MSI files

Inventory Control Machine A SSH B C D Webserver A
B C D Datenbankserver Webserver Playbook Datenbankserver Playbook

# web.yml --- - hosts: web tasks: - name: Install
nginx apt: name=nginx state=latest - name: Ensure nginx is started service: name=nginx state=started

# db.yml --- - hosts: db tasks: - name: Install
PostgreSQL apt: name=postgresql state=latest - name: Ensure PostgreSQL is started service: name=postgresql state=started

% ansible-playbook web.yml % ansible-playbook db.yml

!"" web.yml !"" db.yml !"" site.yml #"" roles #"" service_provider
#"" tasks #"" main.yml

# web.yml --- - hosts: web roles: - { role:
service_provider, service: 'nginx' }

# db.yml --- - hosts: db roles: - { role:
service_provider, service: 'postgresql' }

# site.yml - include: web.yml - include: db.yml

# roles/service_provider/tasks/main.yml - name: Install {{ service }} apt: name={{
service }} state=latest - name: Ensure {{ service }} is started service: name={{ service }} state=started

% ansible-playbook web.yml % ansible-playbook db.yml % ansible-playbook site.yml

Installation Konﬁguration Benutzung Löschung

erzeugt richtet ein beschreibt Vagrantﬁle Provisioner Provider Virtuelle Maschine

config.vm.define "db" do |db| db.vm.network "forwarded_port", guest: 5432, host: 5432
db.vm.provision "ansible" do |ansible| ansible.playbook = "../roles/db.yml" ansible.sudo = true end end end

% vagrant up Bringing machine 'web' up with ‘virtualbox' provider...
Bringing machine 'db' up with ‘virtualbox' provider… ==> web: Running provisioner: ansible… web: ok=3 changed=1 ==> db: Running provisioner: ansible… db: ok=3 changed=1

% vagrant provision ==> web: Running provisioner: ansible… web: ok=3
changed=0 ==> db: Running provisioner: ansible… db: ok=3 changed=0

<!DOCTYPE html> <html> <head> <title>Welcome to nginx!</title> % curl localhost:8080
| head -n4

http://commons.wikimedia.org/wiki/File:Runkelstein_Castle_11.jpg

% ansible-vault create secret.yml Vault password: Confirm Vault password:

% cat secret.yml $ANSIBLE_VAULT;1.1;AES256 65646639303532333334643932343161396535643636 336361313237613831626530313966363463 35643739323730646136653164323062623836653131 34300a323664363935383939636237373163 62383736623964363132663734643666663239636130 393438343238343466313231373462623366
6466336266333338390a666333376632326431663961 363461316538616266646365373736363337 31356166393262656436303166643062303137393733 373137626338616463613532

% ansible-playbook secret.yml —ask-vault-pass Vault password:

Inventory Control Machine Rolling Update A SSH B C D
A B C D …

https://github.com/ansible/ansible-examples --- - hosts: webservers serial: 1 max_fail_percentage: 10

https://github.com/ansible/ansible-examples pre_tasks: - name: disable nagios alerts for this host
nagios: action=disable_alerts host={{ inventory_hostname }} services=webserver delegate_to: "{{ item }}" with_items: groups.monitoring - name: disable the server in haproxy shell: echo "disable server myapplb/ {{ inventory_hostname }}" | socat stdio /var/lib/haproxy/stats delegate_to: "{{ item }}" with_items: groups.lbservers

https://github.com/ansible/ansible-examples roles: - common - base-apache - web

https://github.com/ansible/ansible-examples post_tasks: - name: Wait for webserver to come up
wait_for: host={{ inventory_hostname }} port=80 state=started timeout=80

https://github.com/ansible/ansible-examples - name: Enable the server in haproxy shell: echo
"enable server myapplb/ {{ inventory_hostname }}" | socat stdio /var/lib/haproxy/stats delegate_to: "{{ item }}" with_items: groups.lbservers - name: re-enable nagios alerts nagios: action=enable_alerts host={{ inventory_hostname }} services=webserver delegate_to: "{{ item }}" with_items: groups.monitoring

http://www.ansible.com/aws

Vielen Dank! Simon Olofsson • Content Management AG @solofs •
[email protected] Die Logos wurden den Webseiten der jeweiligen Projekte entnommen.

Automatisieren mit Ansible

Automatisieren mit Ansible

More Decks by Simon Olofsson

Other Decks in Technology

Featured

Transcript