ansible-app-platforme-2024-presentation-

ansibel

1. Repetitive Jobs [Problem] Building VM templates ISO install and configuration Network setup Set up users/group, security, authentication/authorization Software install and configuration Building out clusters Cloning N number of VMs from X number of templates Hostname/network configuration Firewalling Software deployments Turn off monitoring/alerting Pull nodes out of Load Balanced Group Run DB migrations Deploy application code Restart web server Put nodes back in/turn monitoring back on Server maintenance SSH in to every server and restart a service Write complex scripts to log in to every server and update openssl

2. Solution for Problem is Configuration Tools Puppet great with Windows (as long as they’re not XP) amazing Enterprise support cryptic DSL ( imo ) Chef easy to learn if you’re a ruby developer! amazing wealth of cookbooks Almost too verbose SaltStack Ansible

3. Why Ansible ? Agentless! Uses SSH (with one python requirement) Easy-to-read Syntax as YAML file Push-Based Ansible Scales Down Built-in-Modules Full power at the CLI (open source!) Even more features available in enterprise (Tower)

4. How Ansible Works ?

5. Ansible Structure

6. Inventory: Example [production:children] webservers dbservers proxies [ webservers] foo.example.com http_port=80 bar.example.com http_port=8080 [dbservers] db[01:03].example.com [dbservers:vars] pgsql_bind_nic=eth1 [proxies] 192.168.1.1 $ ansible production –a “echo hello” –u joe – k $ ansible dbservers –a “service postgresl restart” –u joe –U root –k -K

7. Modules can be written in any language as long as they output JSON take parameters and conditions to define desired state handles processing of system resources, services, packages, files, etc. in idempotent fashion “seek to avoid changes to the system unless a change needs to be made” ansible comes preloaded with a plethora of modules tons of community pull requests

8. Playbooks More powerful configuration management Kept in source control, developed, validated Declare configurations of more complex mutli-system enviornments Arrange and run tasks synchronously or asynchronously

9. Playbooks: Example --- - hosts : all remote_user : vagrant sudo: true sudo_user: root vars_files: - roles/vars /webserver.encrypt vars: lifecycle: dev roles: - roles/debian - roles/vmware-tools - roles/local-users - roles/sudoers - roles/iptables - roles/clamav - roles/java-jdk-7 - roles/postgres - roles/apache - roles/tomcat-7 - { role: roles/ tc- native, when: native= = 'true' } - roles/ansible - roles/git - roles/ liquibase - roles/cleanup post_tasks : - name: Reboot the Server command : '/sbin/reboot' - name: Wait for Server to come back wait_for : host='{{inventory_hostname} } ’port =' 22’ sudo : no delegate_to : localhost - name: Wait for Services to start fully wait_for : port='{{item}}' delay='5' timeout='600' with_items : - '8009' #ajp - '8080' #tomcat - '80' #httpd

10. Tasks: Example module parameter iterator variable - name: Apache Tomcat | Install | Grab latest tomcat tarball get_url : url =' {{tomcat.base_url}} {{item.sub_url}}{{item.file}} ' dest ='/tmp/ {{item.file}} ' with_items: tomcat.files - name: Apache Tomcat | Install | Extract archive shell : tar -xvzf /tmp/ {{item.file}} -C /usr/local creates =/usr/local/ {{item.target}} with_items: tomcat.files - name: Apache Tomcat | Install | Give ownership of install to tomcat user file : path =/usr/local/ {{item.target}} state =directory owner = {{tomcat.user.name}} group = {{tomcat.user.group}} with_items: tomcat.files - name: Apache Tomcat | Install | Symlink install directory file : src ='/usr/local/ {{item.target}} ' path ='/usr/local/tomcat' state ='link' with_items: tomcat.files - name: Apache Tomcat | Configure | Overlay configuration template : src =‘ {{item.file}} ' dest =' {{item.target}} ' owner = {{tomcat.user.name}} group = {{tomcat.user.group}} with_items: tomcat.config_files

11. Variables: Simple YAML format Can create arrays and hashes Can substitute vars into vars Vars can be defined at many levels ( default, role ,playbook) Can test conditionals on vars and require them Can be filtered and manipulated with jinja2 Can be matched to regex!

12. Templates Templates are interpreted by jinja2 stub out files fill variables in differently depending on conditions Powerful conditionals Loops and iterators Replace a file completely every time? Yes. We configure for an end state.

13. Handlers Written just like a regular task Only run if triggered by the notify directive Indicates a change in the system state Any module can be used for the handler action Handler - name: Restart Tomcat service : name =tomcat state =restarted Task - name: Apache Tomcat | Configure | Overlay configuration template: src=‘{{item.file}}' dest='{{item.target}}’ with_items: tomcat.config_files notify: Restart Tomcat

14. Roles Break up configuration into repeatable chunks Reduce , reuse, recycle Clean, understandable structure Stack on top of each other Ansible Galaxy

15. Docker and Ansible

16. Docker Application Life Cycle with Ansible Write Ansible playbooks for creating Docker images. Run the playbooks to create Docker images on your local machine. Push Docker images up from your local machine to the registry. Write Ansible playbooks to pull Docker images down to remote hosts and start up Docker containers. Run Ansible playbooks to start containers.

17. Ansible Tower is a user friendly web-based Graphical User Interface (GUI) that lowers the entry barrier of using Ansible.

18. Ansible Tower useful features Easy to use GUI with push button execution Centralized job runs, playbook storage, logs... Schedule jobs Use playbooks from the server or from source control Graphical real time output and log history LDAP integration Role based access control Extensible with a fully documented REST API

19. Where do I go from here? Stop doing everything by hand! If you find yourself logging in to more than one VM to do the same task... If you have been meaning to get around to patching or updating a bunch of VMs... If you know all of the prompts of the OS installer by heart... If scp and vi are your favorite tools... If you dread the next release of your application If you wince every time your phone rings

20. Use Ansible Get more sleep Require less coffee