ansible-playbook shell模块转义大括号 {{}} 单引号

2019/03/07 | Ansible | Zhiming Zhang | 1 条评论 | 335 views

今天发现要在shell命令中使用大括号{{}} 刚开始的playbook如下：

#!/usr/bin/ansible-playbook
#############################
- hosts: localhost
  remote_user: root
  gather_facts: false

  tasks:

  - name: "{{ check_command }}"
    shell: /usr/bin/oc get secrets -n namespace secrentname --template '{{ index .data "abc.crt" }}' | base64 -d | openssl x509 -noout -text|grep After
    register: ssl_out
    - debug: var=ssl_out

1

2

3

4

5

6

7

8

9

10

11

12

#!/usr/bin/ansible-playbook

#############################

- hosts: localhost

remote_user: root

gather_facts: false

tasks:

- name: "{{ check_command }}"

shell: /usr/bin/oc get secrets -n namespace secrentname --template '{{ index .data "abc.crt" }}' | base64 -d | openssl x509 -noout -text|grep After

register: ssl_out

- debug: var=ssl_out

发现有两个问题，单引号需要转义，大括号需要转义 ansible 的shell模块中对于单引号的转义很简单”，两个连续的单引号就可以了但是对于大括号则需要：{{ ‘{{&……

ansible register 无视when 条件执行

2019/02/16 | Ansible | Zhiming Zhang | 暂无评论 | 749 views

先来看一段ansible代码：

- name: test
  hosts: localhost
  gather_facts: no
  vars:
    test_name: 'real_name'
    flag: false
  tasks:
    - name: retrieve node's hostname
      shell: "hostname"
      register: test_name
      when: flag | bool

    - debug:
        var: test_name

1

2

3

4

5

6

7

8

9

10

11

12

13

14

- name: test

hosts: localhost

gather_facts: no

vars:

test_name: 'real_name'

flag: false

tasks:

- name: retrieve node's hostname

shell: "hostname"

register: test_name

when: flag | bool

- debug:

var: test_name

正常来说，我们认为会输出结果会是’real_name’，因为第一个任务因为when的条件判断并没有执行但是，结果是什么呢？

ansible-playbook 1.yaml
 [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'


PLAY [test] *************************************************************************************************************************************************************************

TASK [retrieve node's hostname] *****************************************************************************************************************************************************
skipping: [localhost]

TASK [debug] ************************************************************************************************************************************************************************
ok: [localhost] => {
    "test_name": {
        "changed": false,
        "skip_reason": "Conditional result was False",
        "skipped": true
    }
}

PLAY RECAP **************************************************************************************************************************************************************************
localhost                  : ok=1    changed=0    unreachable=0    failed=0

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

ansible-playbook 1.yaml

[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'

PLAY [test] *************************************************************************************************************************************************************************

TASK [retrieve node's hostname] *****************************************************************************************************************************************************

skipping: [localhost]

TASK [debug] ************************************************************************************************************************************************************************

ok: [localhost] => {

"test_name": {

"changed": false,

"skip_reason": "Conditional result was False",

"skipped": true

}

PLAY RECAP **************************************************************************************************************************************************************************

localhost : ok=1 changed=0 unreachable=0 failed=0

并没有，难道是skip了？……

如何创建自己的ansible filter

2018/01/15 | python,运维 | Zhiming Zhang | 暂无评论 | 374 views

ansible提供给我们了很多常用的fitler，官方文档地址： http://docs.ansible.com/ansible/latest/playbooks_filters.html 例子： {{ list1 | min }} “{{ [‘a’,’b’,’c’]|random }}” {{ some_variable | defau……

如何使用with_item的同时使用notify功能

2017/12/05 | Ansible | Zhiming Zhang | 暂无评论 | 359 views

今天研究了一个东西，就是如何在使用with_item的同时根据每一个item的情况，选择是否调用notify 我们很多时候都需要使用with_item这个循环，例如检测文件是否更新，或者其它什么时候，例如我们有4个文件

- a.file
- b.file
- c.file
- d.file

1

2

3

4

- a.file

- b.file

- c.file

- d.file

例如，当a 更新的时候，我们重启a服务，……

ansibleplaybook 如何使用tag

2017/03/04 | Ansible,ansible实战 | Zhiming Zhang | 暂无评论 | 368 views

在日常的ansible-playbook中使用tags 来灵活控制我们向要执行的具体的task ，有时候能达到意想不到的效果看例子：

---
- hosts: all


  tasks:
  - name: My tagged task
    yum:
      name: httpd
      state: latest
    tags: production
  - name: Installs postfix
    yum:
     name: postfix
     state: latest

1

2

3

4

5

6

7

8

9

10

11

12

13

14

---

- hosts: all

tasks:

- name: My tagged task

yum:

name: httpd

state: latest

tags: production

- name: Installs postfix

yum:

name: postfix

state: latest

只执行第一个task:

ansible-playbook main.yml --tags 'production'

1	ansible-playbook main.yml --tags 'production'

只执行第二个task: [crayon-5cb……

如何创建自己的ansible module

2016/12/23 | 运维 | Zhiming Zhang | 3 条评论 | 2718 views

什么是 ansible module? Ansible modules 是一种使用python写成的一些功能块，可以在yaml文件中调用，也就是playbook中可以调用的模块，例如常见的模块 copy ， debug Ansible 本身就提供了很多很多的模块地址什么时候和什么情况下我们会需要自己写module? 绝大……

ansible中的 do until 循环

2016/12/22 | Ansible | Zhiming Zhang | 暂无评论 | 521 views

在我们日常的运维生活中，很多时候我们需要执行一些类似清理的工作：例如：当磁盘空间>90%的时候，我们找到存放网站的文件夹，随机挑选一个文件夹（或者挑选最大的），然后执行转移的命令，将这个文件夹转移到另外的服务器上，但是这个时候就有个问题：当这个文件夹被转移后，磁盘空间是否还是>90%? 当然，我们可以直接将清理脚本执行10……

ansible 模块 module git

2016/11/25 | Ansible | Zhiming Zhang | 暂无评论 | 747 views

官网地址： http://docs.ansible.com/ansible/git_module.html 有时候我们需要操作git相关操作看一下这个例子：

# Example git checkout from Ansible Playbooks
- git: repo=git://foosball.example.org/path/to/repo.git
       dest=/srv/checkout
       version=release-0.22

# Example read-write git checkout from github
- git: repo=ssh://git@github.com/mylogin/hello.git dest=/home/mylogin/hello

# Example just ensuring the repo checkout exists
- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout update=no

# Example just get information about the repository whether or not it has
# already been cloned locally.
- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout clone=no update=no

# Example checkout a github repo and use refspec to fetch all pull requests
- git: repo=https://github.com/ansible/ansible-examples.git dest=/src/ansible-examples refspec=+refs/pull/*:refs/heads/*

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

# Example git checkout from Ansible Playbooks

- git: repo=git://foosball.example.org/path/to/repo.git

dest=/srv/checkout

version=release-0.22

# Example read-write git checkout from github

- git: repo=ssh://git@github.com/mylogin/hello.git dest=/home/mylogin/hello

# Example just ensuring the repo checkout exists

- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout update=no

# Example just get information about the repository whether or not it has

# already been cloned locally.

- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout clone=no update=no

# Example checkout a github repo and use refspec to fetch all pull requests

- git: repo=https://github.com/ansible/ansible-examples.git dest=/src/ansible-examples refspec=+refs/pull/*:refs/heads/*

完整的参数列表 parameter required default choices comment……

ansible-playbook 为某特定的组创建特殊的用户

2016/11/05 | Ansible | Zhiming Zhang | 暂无评论 | 410 views

在系统创建的时候，我们可能需要为所有的服务器创建一个些管理员帐号

- zhang3
- li4
- wang5

1

2

3

- zhang3

- li4

- wang5

这些用户是所有的服务器都需要的，所以我们一般直接写一个Playbook 写上 – hosts: all 但是，有时候，我们不光需要创建通用的用户，我们还需要为某些特殊的服务器创建特有……

ansible 常用module lineinfile 文件单行正则替换

2016/11/04 | Ansible | Zhiming Zhang | 暂无评论 | 929 views

我们在日常的工作中经常会遇到需要修改配置文件中某个项的值的情况，什么apache啊，mysql啊，docker 啊，等等，当然我们可以使用template等其它方式来实现，但是今天我们要说一下这个lineinfile的正则替换，聚个例子来说，docker的配置文件

# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled'

DOCKER_CERT_PATH=/etc/docker

# If you want to add your own registry to be used for docker search and docker
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
# with --add-registry flag. The first registry added will be the first registry
# searched.
ADD_REGISTRY='--add-registry registry.access.redhat.com'

# If you want to block registries from being used, uncomment the BLOCK_REGISTRY
# option and give it a set of registries, each prepended with --block-registry
# flag. For example adding docker.io will stop users from downloading images
# from docker.io
# BLOCK_REGISTRY='--block-registry'

# If you have a registry secured with https but do not have proper certs
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'

# On an SELinux system, if you remove the --selinux-enabled option, you
# also need to turn on the docker_transition_unconfined boolean.
# setsebool -P docker_transition_unconfined 1

# Location used for temporary files, such as those created by
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overriden by setting the following environment variable.
# DOCKER_TMPDIR=/var/tmp

# Controls the /etc/cron.daily/docker-logrotate cron job status.
# To disable, uncomment the line below.
# LOGROTATE=false

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs

OPTIONS='--selinux-enabled'

DOCKER_CERT_PATH=/etc/docker

# If you want to add your own registry to be used for docker search and docker

# pull use the ADD_REGISTRY option to list a set of registries, each prepended

# with --add-registry flag. The first registry added will be the first registry

# searched.

ADD_REGISTRY='--add-registry registry.access.redhat.com'

# If you want to block registries from being used, uncomment the BLOCK_REGISTRY

# option and give it a set of registries, each prepended with --block-registry

# flag. For example adding docker.io will stop users from downloading images

# from docker.io

# BLOCK_REGISTRY='--block-registry'

# If you have a registry secured with https but do not have proper certs

# distributed, you can tell docker to not look for full authorization by

# adding the registry to the INSECURE_REGISTRY line and uncommenting it.

# INSECURE_REGISTRY='--insecure-registry'

# On an SELinux system, if you remove the --selinux-enabled option, you

# also need to turn on the docker_transition_unconfined boolean.

# setsebool -P docker_transition_unconfined 1

# Location used for temporary files, such as those created by

# docker load and build operations. Default is /var/lib/docker/tmp

# Can be overriden by setting the following environment variable.

# DOCKER_TMPDIR=/var/tmp

# Controls the /etc/cron.daily/docker-logrotate cron job status.

# To disable, uncomment the line below.

# LOGROTATE=false

其中……

张志明的个人博客熟悉Ansible,Docker,Openshift,Zabbix,Python,Shell,Iptables的这么一个SRE

标签目录：ansible

ansible-playbook shell模块转义大括号 {{}} 单引号

ansible register 无视when 条件执行

如何创建自己的ansible filter

如何使用with_item的同时使用notify功能

ansibleplaybook 如何使用tag

如何创建自己的ansible module

ansible中的 do until 循环

ansible 模块 module git

ansible-playbook 为某特定的组创建特殊的用户

ansible 常用module lineinfile 文件单行正则替换