ansible自动化运维之playbook

深碍√TFBOYSˉ_ 2021-11-01 06:04 407阅读 0赞

编写apache安装文件

[devlops@server1 ansible]$ ls
    ansible.cfg  inventory
    [devlops@server1 ansible]$ vim playbook.yml
    [devlops@server1 ansible]$ cat playbook.yml 
    ---
    - hosts: prod
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
        - name: start httpd
          service:
            name: httpd
            state: started
    [devlops@server1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devlops@server1 ansible]$ ansible-playbook playbook.yml --list-hosts 
    [devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 2]

[devlops@server1 ansible]$ vim playbook.yml 
    [devlops@server1 ansible]$ mkdir files
    [devlops@server1 ansible]$ cd files/
    [devlops@server1 files]$ scp server3:/etc/httpd/conf/httpd.conf .
    httpd.conf                               100%   11KB  11.5KB/s   00:00    
    [devlops@server1 files]$ cd ..
    [devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 3]

添加触发器

playbook.yml

---
    - hosts: prod
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/http.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd
          service:
            name: httpd
            state: started
      handlers:				##触发器
        - name: restart httpd
          service:
            name: httpd
            state: restarted

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 4]

[devlops@server1 ansible]$ ansible-playbook playbook.yml --syntax-check
    
    playbook: playbook.yml
    [devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 5]  
添加测试文件

playbook.yml

---
    - hosts: prod
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
        - name: test 
          copy:
            src: files/index.html
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/http.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd and firewalld
          service:
            name: "{
       { item }}"
            state: started
          loop:
            - httpd
            - firewalld
    
        - name: configure firewalld
          firewalld:
            service: http
            permanent: yes
            immediate: yes
            state: enabled
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted

[devlops@server1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 6]

启动防火墙

[devlops@server1 ansible]$ cat playbook.yml 
    ---
    - hosts: prod
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
        - name: test 
          copy:
            src: files/index.html
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/http.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd and firewalld
          service:
            name: "{
       { item }}"
            state: started
          loop:
            - httpd
            - firewalld
    
        - name: configure firewalld
          firewalld:
            service: http
            permanent: yes
            immediate: yes
            state: enabled
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted
    
    - hosts: localhost
      become: no
      tasks:
        - name: test httpd
          uri:
            url: http://172.25.31.3
            status_code: 200

修改变量

[devlops@server1 ansible]$ ls
    ansible.cfg  files  inventory  playbook.retry  playbook.yml  templates
    [devlops@server1 ansible]$ cd templates/
    [devlops@server1 templates]$ ls
    httpd.conf.j2
    [devlops@server1 templates]$ vim httpd.conf.j2

![在这里插入图片描述][2019081016455373.png]

[devlops@server1 ansible]$ vim inventory 
    [devlops@server1 ansible]$ cat inventory 
    localhost
    [test]
    server2 http_host=172.25.31.2
    
    [prod]
    server3 http_host=172.25.31.3
    
    [webserver:children]
    test
    prod

[devlops@server1 ansible]$ cat playbook.yml 
    ---
    - hosts: webserver
      vars:
        http_port: 80
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
    
        - name: copy index.html 
          copy:
            src: files/index.html
            dest: /var/www/html/index.html
    
        - name: configure httpd
          template: 
            src: templates/httpd.conf.j2
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd and firewalld
          service:
            name: "{
       { item }}"
            state: started
          loop:
            - httpd
            - firewalld
    
        - name: configure firewalld
          firewalld:
            service: http
            permanent: yes
            immediate: yes
            state: enabled
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted
    
    - hosts: localhost
      become: no
      tasks:
        - name: test httpd
          uri:
            url: http://172.25.31.3
            status_code: 200

[devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 7]  
server2:  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][20190810164625514.png]

server3：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 9]  
![在这里插入图片描述][20190810164823499.png]

获取管理节点的信息

[devlops@server1 ansible]$ vim file.yml 
    [devlops@server1 ansible]$ cat file.yml 
    ---
    - hosts: webserver
      tasks:
        - name: create file
          template:
            src: templates/file.j2
            dest: /tmp/file

[devlops@server1 ansible]$ ls
    ansible.cfg  files     inventory       playbook.yml
    file.retry   file.yml  playbook.retry  templates
    [devlops@server1 ansible]$ cat templates/file.j2 
    主机名: {
       { ansible_facts['hostname'] }}
    主机IP: {
       { ansible_facts['default_ipv4']['address'] }}
    主机DNS: {
       { ansible_facts['dns']['nameservers'][-1] }}
    boot分区: {
       { ansible_facts['devices']['sda']['partitions']['sda1']['size'] }}
    内核: {
       { ansible_facts['kernel'] }}
    内存空闲: {
       { ansible_facts['memfree_mb'] }}

[devlops@server1 ansible]$ ansible-playbook file.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 10]server2:  
![在这里插入图片描述][20190810170135604.png]  
server3:  
![在这里插入图片描述][2019081017014363.png]

ansible自动部署haproxy实现负载均衡

[root@server1 ansible]# vim /etc/sudoers
    [root@server1 ansible]# su - devlops

![在这里插入图片描述][20190810171141776.png]

[devlops@server1 ansible]$ cat playbook.yml 
    ---
    - hosts: webserver
      vars:
        http_port: 80
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
    
        - name: copy index.html
          copy:
            content: "{
       { ansible_facts['hostname'] }}"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          template:
            src: templates/httpd.conf.j2
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start  httpd and firewalld
          service:
            name: "{
       { item }}"
            state: started
          loop:
            - httpd
            - firewalld
    
        - name: configure firewalld
          firewalld:
            service: http
            permanent: yes
            immediate: yes
            state: enabled
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted
    
    
    - hosts: localhost
      tasks:
        - name: install haproxy
          yum:
            name: haproxy
            state: present
    
        - name: configure haproxy
          template:
            src: templates/haproxy.cfg.j2
            dest: /etc/haproxy/haproxy.cfg
          notify: restart haproxy
    
        - name: start haproxy
          service:
            name: haproxy
            state: started
    
      handlers:
        - name: restart haproxy
          service:
            name: haproxy
            state: restarted

获取haproxy配置文件
    [devlops@server1 templates]$ vim haproxy.cfg.j2

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 11]

[devlops@server1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 12]测试：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 13]  
![在这里插入图片描述][20190810171544836.png]  
![在这里插入图片描述][20190810171557116.png]

添加server4到haproxy组里

[devlops@server1 ansible]$ vim inventory 
    [devlops@server1 ansible]$ cat inventory 
    [test1]
    server4
    [test]
    server2 http_host=172.25.31.2
    
    [prod]
    server3 http_host=172.25.31.3
    
    [webserver:children]
    test
    prod
    test1

[devlops@server1 ansible]$ tail templates/haproxy.cfg.j2 
    #---------------------------------------------------------------------
    # static backend for serving up images, stylesheets and such
    #---------------------------------------------------------------------
    # round robin balancing between the various backends
    #---------------------------------------------------------------------
    backend app
        balance     roundrobin
    {% for host in groups['webserver'] %}
        server {
       { hostvars[host]['ansible_facts']['hostname'] }} {
       { hostvars[host]['ansible_facts']['eth0']['ipv4']['address'] }}:80 check
    {% endfor %}

---
    - hosts: webserver
      vars:
        http_port: 80
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
    
        - name: copy index.html
          copy:
            content: "{
       { ansible_facts['hostname'] }}"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          template:
            src: templates/httpd.conf.j2
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start  httpd and firewalld
          service:
            name: "{
       { item }}"
            state: started
          loop:
            - httpd
            - firewalld
    
        - name: configure firewalld
          firewalld:
            service: http
            permanent: yes
            immediate: yes
            state: enabled
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted
    
    
    - hosts: localhost
      tasks:
        - name: install haproxy
          yum:
            name: haproxy
            state: present
    
        - name: configure haproxy
          template:
            src: templates/haproxy.cfg.j2
            dest: /etc/haproxy/haproxy.cfg
          notify: restart haproxy
    
        - name: start haproxy
          service:
            name: haproxy
            state: started
    
      handlers:
        - name: restart haproxy
          service:
            name: haproxy
            state: restarted

[devlops@server1 ansible]$ ansible-playbook playbook.yml

测试：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 14]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70]: /images/20211101/24b44b600f9346919ebbe46c8333dcf1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 1]: /images/20211101/cb1d9e6cc69d4ff59df3c611bd92f03d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 2]: /images/20211101/56d5465d842747598400176697f8a507.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 3]: /images/20211101/3f20670d576040c7b979d69c4861fe4a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 4]: /images/20211101/72f93d8872ab4f529d45f1d34059ae0a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 5]: /images/20211101/0f036116024247f9ba3b1539315c5a68.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 6]: /images/20211101/fffa0ce0adf646448c732d58c65d609c.png
[2019081016455373.png]: /images/20211101/5aa6e6fe69074a42b14933d41915f19e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 7]: /images/20211101/2d43f6c8d24044b7917b8ea464e35045.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 8]: /images/20211101/96a49fedb43943bca56c65edce436de7.png
[20190810164625514.png]: /images/20211101/b34b1b5477c144a18aad3946aa5f48b2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 9]: /images/20211101/b11089a8c413409b97464d1358b6838c.png
[20190810164823499.png]: /images/20211101/4ccb14adfda447019a9dd0ef4460dd09.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 10]: /images/20211101/6ea90c5c3276406ea884864827e3fe39.png
[20190810170135604.png]: /images/20211101/3c8ce376aed64789a2c345711631d298.png
[2019081017014363.png]: /images/20211101/ac62d1be5a0249b2bab2d32f683f218b.png
[20190810171141776.png]: /images/20211101/8bf64639521c4c18bc42c892069ac7bf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 11]: /images/20211101/d92294438233426883e64f8917beca03.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 12]: /images/20211101/c8c746d7bdb24c5ba56cf02accd9cf1e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 13]: /images/20211101/5bdbf84aaddb4b85a3bd986623e2e12b.png
[20190810171544836.png]: /images/20211101/ee8ebd3b16384892ad8fc20cda1bc761.png
[20190810171557116.png]: /images/20211101/5d5a2ab65c3646e694627b5eb13b90af.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 14]: /images/20211101/261195fc75c1446baab95502c9e9a4b1.png