Day 66 - Ansible Playbooks cont...
This commit is contained in:
Michael Cade
parent
9340f73da8
commit
e87faa15ee
4
Days/Configmgmt/ansible-scenario2/handlers/main.yml
Normal file
4
Days/Configmgmt/ansible-scenario2/handlers/main.yml
Normal file
@ -0,0 +1,4 @@
|
||||
- name: restart apache
|
||||
service:
|
||||
name: apache2
|
||||
state: restarted
|
||||
11
Days/Configmgmt/ansible-scenario2/playbook2.yml
Normal file
11
Days/Configmgmt/ansible-scenario2/playbook2.yml
Normal file
@ -0,0 +1,11 @@
|
||||
- hosts: webservers
|
||||
become: yes
|
||||
vars:
|
||||
http_port: 8000
|
||||
https_port: 4443
|
||||
html_welcome_msg: "Hello 90DaysOfDevOps - Welcome to Day 66!"
|
||||
tasks:
|
||||
- import_tasks: tasks/apache2_install.yml
|
||||
|
||||
handlers:
|
||||
- import_tasks: handlers/main.yml
|
||||
18
Days/Configmgmt/ansible-scenario2/tasks/apache2_install.yml
Normal file
18
Days/Configmgmt/ansible-scenario2/tasks/apache2_install.yml
Normal file
@ -0,0 +1,18 @@
|
||||
- name: ensure apache is at the latest version
|
||||
apt: name=apache2 state=latest
|
||||
|
||||
- name: write the apache2 ports.conf config file
|
||||
template: src=templates/ports.conf.j2 dest=/etc/apache2/ports.conf
|
||||
notify: restart apache
|
||||
|
||||
- name: write a basic index.html file
|
||||
template:
|
||||
src: templates/index.html.j2
|
||||
dest: /var/www/html/index.html
|
||||
notify:
|
||||
- restart apache
|
||||
|
||||
- name: ensure apache is running
|
||||
service:
|
||||
name: apache2
|
||||
state: started
|
||||
@ -0,0 +1,5 @@
|
||||
<html>
|
||||
|
||||
<h1>{{ html_welcome_msg }}</h1>
|
||||
|
||||
</html>
|
||||
16
Days/Configmgmt/ansible-scenario2/templates/ports.conf.j2
Normal file
16
Days/Configmgmt/ansible-scenario2/templates/ports.conf.j2
Normal file
@ -0,0 +1,16 @@
|
||||
|
||||
# If you just change the port or add more ports here, you will likely also
|
||||
# have to change the VirtualHost statement in
|
||||
# /etc/apache2/sites-enabled/000-default.conf
|
||||
|
||||
Listen {{ http_port }}
|
||||
|
||||
<IfModule ssl_module>
|
||||
Listen {{ https_port }}
|
||||
</IfModule>
|
||||
|
||||
<IfModule mod_gnutls.c>
|
||||
Listen {{ https_port }}
|
||||
</IfModule>
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
8
Days/Configmgmt/ansible-scenario3/playbook3.yml
Normal file
8
Days/Configmgmt/ansible-scenario3/playbook3.yml
Normal file
@ -0,0 +1,8 @@
|
||||
- hosts: webservers
|
||||
become: yes
|
||||
vars:
|
||||
http_port: 8000
|
||||
https_port: 4443
|
||||
html_welcome_msg: "Hello 90DaysOfDevOps - Welcome to Day 66!"
|
||||
roles:
|
||||
- apache2
|
||||
29
Days/Configmgmt/ansible-scenario3/roles/apache2/.travis.yml
Normal file
29
Days/Configmgmt/ansible-scenario3/roles/apache2/.travis.yml
Normal file
@ -0,0 +1,29 @@
|
||||
---
|
||||
language: python
|
||||
python: "2.7"
|
||||
|
||||
# Use the new container infrastructure
|
||||
sudo: false
|
||||
|
||||
# Install ansible
|
||||
addons:
|
||||
apt:
|
||||
packages:
|
||||
- python-pip
|
||||
|
||||
install:
|
||||
# Install ansible
|
||||
- pip install ansible
|
||||
|
||||
# Check ansible version
|
||||
- ansible --version
|
||||
|
||||
# Create ansible.cfg with correct roles_path
|
||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
||||
|
||||
script:
|
||||
# Basic role syntax check
|
||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
||||
|
||||
notifications:
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
||||
38
Days/Configmgmt/ansible-scenario3/roles/apache2/README.md
Normal file
38
Days/Configmgmt/ansible-scenario3/roles/apache2/README.md
Normal file
@ -0,0 +1,38 @@
|
||||
Role Name
|
||||
=========
|
||||
|
||||
A brief description of the role goes here.
|
||||
|
||||
Requirements
|
||||
------------
|
||||
|
||||
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
|
||||
|
||||
Role Variables
|
||||
--------------
|
||||
|
||||
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
|
||||
|
||||
Dependencies
|
||||
------------
|
||||
|
||||
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
|
||||
|
||||
Example Playbook
|
||||
----------------
|
||||
|
||||
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
|
||||
|
||||
- hosts: servers
|
||||
roles:
|
||||
- { role: username.rolename, x: 42 }
|
||||
|
||||
License
|
||||
-------
|
||||
|
||||
BSD
|
||||
|
||||
Author Information
|
||||
------------------
|
||||
|
||||
An optional section for the role authors to include contact information, or a website (HTML is not allowed).
|
||||
@ -0,0 +1,2 @@
|
||||
---
|
||||
# defaults file for roles/apache2
|
||||
@ -0,0 +1,4 @@
|
||||
- name: restart apache
|
||||
service:
|
||||
name: apache2
|
||||
state: restarted
|
||||
@ -0,0 +1,52 @@
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.1
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
@ -0,0 +1,18 @@
|
||||
- name: ensure apache is at the latest version
|
||||
apt: name=apache2 state=latest
|
||||
|
||||
- name: write the apache2 ports.conf config file
|
||||
template: src=templates/ports.conf.j2 dest=/etc/apache2/ports.conf
|
||||
notify: restart apache
|
||||
|
||||
- name: write a basic index.html file
|
||||
template:
|
||||
src: templates/index.html.j2
|
||||
dest: /var/www/html/index.html
|
||||
notify:
|
||||
- restart apache
|
||||
|
||||
- name: ensure apache is running
|
||||
service:
|
||||
name: apache2
|
||||
state: started
|
||||
@ -0,0 +1,3 @@
|
||||
---
|
||||
# tasks file for roles/apache2
|
||||
- import_tasks: apache2_install.yml
|
||||
@ -0,0 +1,5 @@
|
||||
<html>
|
||||
|
||||
<h1>{{ html_welcome_msg }}</h1>
|
||||
|
||||
</html>
|
||||
@ -0,0 +1,16 @@
|
||||
|
||||
# If you just change the port or add more ports here, you will likely also
|
||||
# have to change the VirtualHost statement in
|
||||
# /etc/apache2/sites-enabled/000-default.conf
|
||||
|
||||
Listen {{ http_port }}
|
||||
|
||||
<IfModule ssl_module>
|
||||
Listen {{ https_port }}
|
||||
</IfModule>
|
||||
|
||||
<IfModule mod_gnutls.c>
|
||||
Listen {{ https_port }}
|
||||
</IfModule>
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
@ -0,0 +1,2 @@
|
||||
localhost
|
||||
|
||||
@ -0,0 +1,5 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- roles/apache2
|
||||
@ -0,0 +1,2 @@
|
||||
---
|
||||
# vars file for roles/apache2
|
||||
BIN
Days/Images/Day66_config1.png
Normal file
BIN
Days/Images/Day66_config1.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 32 KiB |
BIN
Days/Images/Day66_config10.png
Normal file
BIN
Days/Images/Day66_config10.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 100 KiB |
BIN
Days/Images/Day66_config2.png
Normal file
BIN
Days/Images/Day66_config2.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 96 KiB |
BIN
Days/Images/Day66_config3.png
Normal file
BIN
Days/Images/Day66_config3.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 45 KiB |
BIN
Days/Images/Day66_config4.png
Normal file
BIN
Days/Images/Day66_config4.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 68 KiB |
BIN
Days/Images/Day66_config5.png
Normal file
BIN
Days/Images/Day66_config5.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 110 KiB |
BIN
Days/Images/Day66_config6.png
Normal file
BIN
Days/Images/Day66_config6.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 58 KiB |
BIN
Days/Images/Day66_config7.png
Normal file
BIN
Days/Images/Day66_config7.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 100 KiB |
BIN
Days/Images/Day66_config8.png
Normal file
BIN
Days/Images/Day66_config8.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 95 KiB |
BIN
Days/Images/Day66_config9.png
Normal file
BIN
Days/Images/Day66_config9.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 98 KiB |
119
Days/day66.md
119
Days/day66.md
@ -1 +1,118 @@
|
||||
## Ansible Playbooks Continued...
|
||||
## Ansible Playbooks Continued...
|
||||
|
||||
In our last section we started with creating our small lab using a Vagrantfile to deploy 4 machines and we used our Linux machine we created in that section as our ansible control system.
|
||||
|
||||
We also ran through a few scenarios of playbooks and at the end we had a playbook that made our web01 and web02 individual webservers.
|
||||
|
||||
|
||||
|
||||
### Keeping things tidy
|
||||
|
||||
Before we get into further automation and deployment we should cover the ability to keep our playbook lean and tidy and how we can separate our taks and handlers into subfolders.
|
||||
|
||||
we are basically going to copy our tasks into their own file within a folder.
|
||||
|
||||
```
|
||||
- name: ensure apache is at the latest version
|
||||
apt: name=apache2 state=latest
|
||||
|
||||
- name: write the apache2 ports.conf config file
|
||||
template: src=templates/ports.conf.j2 dest=/etc/apache2/ports.conf
|
||||
notify: restart apache
|
||||
|
||||
- name: write a basic index.html file
|
||||
template:
|
||||
src: templates/index.html.j2
|
||||
dest: /var/www/html/index.html
|
||||
notify:
|
||||
- restart apache
|
||||
|
||||
- name: ensure apache is running
|
||||
service:
|
||||
name: apache2
|
||||
state: started
|
||||
```
|
||||
|
||||
and the same for the handlers.
|
||||
|
||||
```
|
||||
- name: restart apache
|
||||
service:
|
||||
name: apache2
|
||||
state: restarted
|
||||
```
|
||||
|
||||
then within our playbook now named `playbook2.yml` we point to these files. All of which can be found at [ansible-scenario2](Days/../Configmgmt/ansible-scenario2/)
|
||||
|
||||
You can test this on your control machine. If you have copied the files from the repository you should have noticed something changed in the "write a basic index.html file"
|
||||
|
||||
|
||||
|
||||
Let's find out what simple change I made. Using `curl web01:8000`
|
||||
|
||||
|
||||
|
||||
We have just tidied up our playbook and started to separate areas that could make a playbook very overwhelming at scale.
|
||||
|
||||
### Roles and Ansible Galaxy
|
||||
|
||||
At the moment we have deployed 4 VMs and we have configured 2 of these VMs as our webservers but we have some more specific functions namely, a database server and a loadbalancer or proxy. In order for us to do this and tidy up our repository we can use roles within Ansible.
|
||||
|
||||
To do this we will use the `ansible-galaxy` command which is there to manage ansible roles in shared repositories.
|
||||
|
||||
|
||||
|
||||
We are going to use `ansible-galaxy` to create a role for apache2 which is where we are going to put our specifics for our webservers.
|
||||
|
||||
|
||||
|
||||
The above command `ansible-galaxy init roles/apache2` will create the folder structure that we have shown above. Our next step is we need to move our existing tasks and templates to the relevant folders in the new structure.
|
||||
|
||||
|
||||
|
||||
Copy and paste is easy to move those files but we also need to make a change to the tasks/main.yml so that we point this to the apache2_install.yml.
|
||||
|
||||
We also need to change our playbook now to refer to our new role. In the playbook1.yml and playbook2.yml we determine our tasks and handlers in different ways as we changed these between the two versions. We need to change our playbook to use this role as per below:
|
||||
|
||||
```
|
||||
- hosts: webservers
|
||||
become: yes
|
||||
vars:
|
||||
http_port: 8000
|
||||
https_port: 4443
|
||||
html_welcome_msg: "Hello 90DaysOfDevOps - Welcome to Day 66!"
|
||||
roles:
|
||||
- apache2
|
||||
```
|
||||
|
||||
|
||||
|
||||
We can now run our playbook again this time with the new playbook name `ansible-playbook playbook3.yml` you will notice the depreciation, we can fix that next.
|
||||
|
||||
|
||||
|
||||
Ok, the depreciation although our playbook ran we should fix our ways now, in order to do that I have changed the include option in the tasks/main.yml to now be import_tasks as per below.
|
||||
|
||||
|
||||
|
||||
You can find these files in the [ansible-scenario3](Days/Configmgmt/ansible-scenario3)
|
||||
|
||||
We are also going to create a few more roles whilst using `ansible-galaxy` we are going to create:
|
||||
|
||||
- common = for all of our servers (`ansible-galaxy init roles/common`)
|
||||
- nginx = for our loadbalancer (`ansible-galaxy init roles/nginx`)
|
||||
|
||||
|
||||
|
||||
I am going to leave this one here and in the next session we will start working on those other nodes we have deployed but have not done anything with yet.
|
||||
|
||||
## Resources
|
||||
|
||||
- [What is Ansible](https://www.youtube.com/watch?v=1id6ERvfozo)
|
||||
- [Ansible 101 - Episode 1 - Introduction to Ansible](https://www.youtube.com/watch?v=goclfp6a2IQ)
|
||||
- [NetworkChuck - You need to learn Ansible right now!](https://www.youtube.com/watch?v=5hycyr-8EKs&t=955s)
|
||||
- [Your complete guide to Ansible](https://www.youtube.com/playlist?list=PLnFWJCugpwfzTlIJ-JtuATD2MBBD7_m3u)
|
||||
|
||||
This final playlist listed above is where a lot of the code and ideas came from for this section, a great resource and walkthrough in video format.
|
||||
|
||||
See you on [Day 67](day67.md)
|
||||
Loading…
Reference in New Issue
Block a user