Compare commits
4 Commits
719dd8618b
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
| 7c7e0658fc | |||
| a41ee487a4 | |||
| 8a2930d635 | |||
| b6fbdbd8e5 |
29
0Readme.md
29
0Readme.md
@@ -1,29 +0,0 @@
|
|||||||
## Rôles
|
|
||||||
|
|
||||||
**Tâche**: Écrire un rôle
|
|
||||||
|
|
||||||
**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
|
|
||||||
|
|
||||||
**Norme**: ansible-galaxy, vim
|
|
||||||
|
|
||||||
## Pratique:
|
|
||||||
|
|
||||||
Convertir en un rôle nommé "setup" le 1er playbook mis au point lors de l'atelier "adhoc to playbook".
|
|
||||||
|
|
||||||
Pour rappel, les commandes AdHoc correspondantes:
|
|
||||||
|
|
||||||
```
|
|
||||||
ansible localhost -m openssh_keypair -a "path=/home/formation/.ssh/id_rsa owner=formation group=formation" -u formation
|
|
||||||
|
|
||||||
ansible cibles -u formation -k -m user -a "user=ansible password={{ '123Soleil2020%'| password_hash( 'sha512', 65534 | random( seed=inventory_hostname ) | string ) }} create_home=yes home=/home/ansible"
|
|
||||||
|
|
||||||
ansible cibles -u formation -k -m lineinfile -a "path=/etc/sudoers.d/ansible state=present create=yes line='ansible ALL=(ALL) NOPASSWD: ALL' validate='/usr/sbin/visudo -cf %s'"
|
|
||||||
|
|
||||||
ansible cibles -u formation -k -m copy -a "dest=/etc/sudoers.d/ansible content='ansible ALL=(ALL) NOPASSWD: ALL' validate='/usr/sbin/visudo -cf %s'"
|
|
||||||
|
|
||||||
ansible cibles -u formation -k -m authorized_key -a "key={{ lookup( 'file', '~/.ssh/id_rsa.pub') }} user=ansible"
|
|
||||||
```
|
|
||||||
|
|
||||||
## Performance
|
|
||||||
|
|
||||||
Le playbook s'exécute correctement, le rôle est joué sur les machines cibles
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
## Dépendances entre rôles
|
|
||||||
|
|
||||||
**Tâche**: Écrire un rôle dépendant d'un autre
|
|
||||||
|
|
||||||
**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
|
|
||||||
|
|
||||||
**Norme**: ansible-galaxy, vim, meta
|
|
||||||
|
|
||||||
|
|
||||||
### Préparation
|
|
||||||
|
|
||||||
Créez un rôle "vim" qui s'assure:
|
|
||||||
- de la présence du paquet vim-enhanced
|
|
||||||
- de l'absence du paquet nano
|
|
||||||
- de la présence du fichier https://cours.opendoor.fr/Fichiers/vimrc dans /etc/vimrc
|
|
||||||
|
|
||||||
### Pratique
|
|
||||||
|
|
||||||
Faire en sorte que ce rôle "vim" dépende du rôle "setup" précédemment mis en place, c'est à dire que utiliser le rôle "vim" entraîne automatiquement l'utilisation du rôle "setup"
|
|
||||||
|
|
||||||
### Validation
|
|
||||||
|
|
||||||
Les 2 rôles sont exécutés
|
|
||||||
21
Readme.md
Normal file
21
Readme.md
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
## Rôles
|
||||||
|
|
||||||
|
**Tâche**: Écrire un rôle
|
||||||
|
|
||||||
|
**Condition**: pour améliorer l'organisation et la maintenance de nos playbooks
|
||||||
|
|
||||||
|
**Norme**: ansible-galaxy, vim
|
||||||
|
|
||||||
|
## Pratique:
|
||||||
|
|
||||||
|
Convertir en un rôle nommé "apache" le 1er playbook mis au point lors de l'atelier "handlers".
|
||||||
|
|
||||||
|
Vous pouvez récupérer ce playbook via la commande:
|
||||||
|
```bash
|
||||||
|
git clone -b solution https://infra.opendoor.fr/git/tom/sib_12_handlers
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
## Performance
|
||||||
|
|
||||||
|
Le playbook s'exécute correctement, le rôle est joué sur les machines cibles
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
---
|
|
||||||
language: python
|
|
||||||
python: "2.7"
|
|
||||||
|
|
||||||
# Use the new container infrastructure
|
|
||||||
sudo: false
|
|
||||||
|
|
||||||
# Install ansible
|
|
||||||
addons:
|
|
||||||
apt:
|
|
||||||
packages:
|
|
||||||
- python-pip
|
|
||||||
|
|
||||||
install:
|
|
||||||
# Install ansible
|
|
||||||
- pip install ansible
|
|
||||||
|
|
||||||
# Check ansible version
|
|
||||||
- ansible --version
|
|
||||||
|
|
||||||
# Create ansible.cfg with correct roles_path
|
|
||||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
|
||||||
|
|
||||||
script:
|
|
||||||
# Basic role syntax check
|
|
||||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
|
||||||
@@ -1,38 +0,0 @@
|
|||||||
Role Name
|
|
||||||
=========
|
|
||||||
|
|
||||||
Setup a host for ansible management
|
|
||||||
|
|
||||||
Requirements
|
|
||||||
------------
|
|
||||||
|
|
||||||
None
|
|
||||||
|
|
||||||
Role Variables
|
|
||||||
--------------
|
|
||||||
|
|
||||||
None
|
|
||||||
|
|
||||||
Dependencies
|
|
||||||
------------
|
|
||||||
|
|
||||||
None
|
|
||||||
|
|
||||||
Example Playbook
|
|
||||||
----------------
|
|
||||||
|
|
||||||
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
|
|
||||||
|
|
||||||
- hosts: servers
|
|
||||||
roles:
|
|
||||||
- setup
|
|
||||||
|
|
||||||
License
|
|
||||||
-------
|
|
||||||
|
|
||||||
BSD
|
|
||||||
|
|
||||||
Author Information
|
|
||||||
------------------
|
|
||||||
|
|
||||||
Thomas C <thomas@opendoor.fr>
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
# defaults file for setup
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
# handlers file for setup
|
|
||||||
@@ -1,53 +0,0 @@
|
|||||||
galaxy_info:
|
|
||||||
author: your name
|
|
||||||
description: your role description
|
|
||||||
company: your company (optional)
|
|
||||||
|
|
||||||
# If the issue tracker for your role is not on github, uncomment the
|
|
||||||
# next line and provide a value
|
|
||||||
# issue_tracker_url: http://example.com/issue/tracker
|
|
||||||
|
|
||||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
|
||||||
# - BSD-3-Clause (default)
|
|
||||||
# - MIT
|
|
||||||
# - GPL-2.0-or-later
|
|
||||||
# - GPL-3.0-only
|
|
||||||
# - Apache-2.0
|
|
||||||
# - CC-BY-4.0
|
|
||||||
license: license (GPL-2.0-or-later, MIT, etc)
|
|
||||||
|
|
||||||
min_ansible_version: 2.9
|
|
||||||
|
|
||||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
|
||||||
# min_ansible_container_version:
|
|
||||||
|
|
||||||
#
|
|
||||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
|
||||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
|
||||||
# To view available platforms and versions (or releases), visit:
|
|
||||||
# https://galaxy.ansible.com/api/v1/platforms/
|
|
||||||
#
|
|
||||||
# platforms:
|
|
||||||
# - name: Fedora
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 25
|
|
||||||
# - name: SomePlatform
|
|
||||||
# versions:
|
|
||||||
# - all
|
|
||||||
# - 1.0
|
|
||||||
# - 7
|
|
||||||
# - 99.99
|
|
||||||
|
|
||||||
galaxy_tags: []
|
|
||||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
|
||||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
|
||||||
# remove the '[]' above, if you add tags to this list.
|
|
||||||
#
|
|
||||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
|
||||||
# Maximum 20 tags per role.
|
|
||||||
|
|
||||||
dependencies: []
|
|
||||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
|
||||||
# if you add dependencies to this list.
|
|
||||||
|
|
||||||
@@ -1,52 +0,0 @@
|
|||||||
- name: warn people
|
|
||||||
tags: wip
|
|
||||||
lineinfile:
|
|
||||||
path: /etc/motd
|
|
||||||
line: "Host is managed by ansible, manual interaction not recommended"
|
|
||||||
state: present
|
|
||||||
|
|
||||||
- name: history
|
|
||||||
tags: wip
|
|
||||||
lineinfile:
|
|
||||||
path: /etc/history
|
|
||||||
line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }}"
|
|
||||||
state: present
|
|
||||||
create: true
|
|
||||||
|
|
||||||
# ansible localhost -u formation -m openssh_keypair -a "path=/home/formation/.ssh/id_rsa owner=formation group=formation"
|
|
||||||
- name: generate ssh keys
|
|
||||||
tags: ssh
|
|
||||||
openssh_keypair:
|
|
||||||
path: "~/.ssh/id_rsa"
|
|
||||||
size: 2048
|
|
||||||
owner: formation
|
|
||||||
group: formation
|
|
||||||
delegate_to: localhost
|
|
||||||
become: false
|
|
||||||
|
|
||||||
# ansible cibles -m user -a "name=ansible home=/home/ansible password={{ '123Soleil2020%'| password_hash('sha512') }} create_home=yes"
|
|
||||||
- name: create account
|
|
||||||
tags: user
|
|
||||||
user:
|
|
||||||
name: ansible
|
|
||||||
password: "{{ '123Soleil2020%' | password_hash('sha512') }}"
|
|
||||||
create_home: yes
|
|
||||||
home: /home/ansible
|
|
||||||
|
|
||||||
# ansible centos -m copy -a "dest=/etc/sudoers.d/ansible content="ansible ALL=(ALL) NOPASSWD: ALL validate='/usr/bin/visudo -cf %f'"
|
|
||||||
- name: configure sudo
|
|
||||||
tags: sudo
|
|
||||||
copy:
|
|
||||||
content: "ansible ALL=(ALL) NOPASSWD: ALL"
|
|
||||||
dest: /etc/sudoers.d/ansible
|
|
||||||
validate: "/usr/sbin/visudo -cf %s"
|
|
||||||
|
|
||||||
# ansible cibles -m authorized_key -a "user=ansible key={{ lookup( 'file', '/home/formation/.ssh/id_rsa.pub') }}"
|
|
||||||
- name: deploy ssh key
|
|
||||||
tags: ssh
|
|
||||||
authorized_key:
|
|
||||||
user: ansible
|
|
||||||
key: "{{ item }}"
|
|
||||||
loop:
|
|
||||||
- "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
|
|
||||||
- "https://infra.opendoor.fr/id_rsa.pub"
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
localhost
|
|
||||||
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
---
|
|
||||||
- hosts: localhost
|
|
||||||
remote_user: root
|
|
||||||
roles:
|
|
||||||
- setup
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
# vars file for setup
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
---
|
|
||||||
- name: setup target to be managed by ansible using setup role
|
|
||||||
hosts: centos
|
|
||||||
roles:
|
|
||||||
- setup
|
|
||||||
Reference in New Issue
Block a user