• Ansible-变量及加密


    1.变量命名
    只能包含数字,下划线,字母
    只能用下划线或字母开头

    2.变量级别
    全局:    从命令行或配置文件中设定的
    paly:    在play和相关结构中设定的
    主机:    由清单,事实收集或注册的任务

    变量优先级设定: 狭窄范围有限与广域范围

    1. 书写playbook文件
    2. [admin@ansible .ansible]$ vim test.yml
    3. [admin@ansible .ansible]$ cat test.yml
    4. - name: test
    5. hosts: westos
    6. vars:
    7. NAME: westos
    8. tasks:
    9. - name: debug
    10. debug:
    11. msg: "{{ NAME }}"
    12. - name: create file
    13. file:
    14. path: "/mnt/{{ NAME }}"
    15. state: touch
    16. - name: create file
    17. file:
    18. path: "/mnt/{{ item }}"
    19. state: touch
    20. loop:
    21. - file1
    22. - file2
    23. - file3
    24. - name: copy
    25. copy:
    26. dest: /mnt/testfile
    27. content: "{{ansible_facts['fqdn']}}"
    1. 测试书写的playbook文件
    2. [admin@ansible .ansible]$ ansible-playbook test.yml
    3. PLAY [test] ***********************************************************************************************************************
    4. TASK [Gathering Facts] ************************************************************************************************************
    5. ok: [172.25.32.12]
    6. ok: [172.25.32.11]
    7. TASK [debug] **********************************************************************************************************************
    8. ok: [172.25.32.11] => {
    9. "msg": "westos"
    10. }
    11. ok: [172.25.32.12] => {
    12. "msg": "westos"
    13. }
    14. TASK [create file] ****************************************************************************************************************
    15. changed: [172.25.32.12]
    16. changed: [172.25.32.11]
    17. TASK [create file] ****************************************************************************************************************
    18. changed: [172.25.32.11] => (item=file1)
    19. changed: [172.25.32.12] => (item=file1)
    20. changed: [172.25.32.11] => (item=file2)
    21. changed: [172.25.32.12] => (item=file2)
    22. changed: [172.25.32.11] => (item=file3)
    23. changed: [172.25.32.12] => (item=file3)
    24. TASK [copy] ***********************************************************************************************************************
    25. changed: [172.25.32.11]
    26. changed: [172.25.32.12]
    27. PLAY RECAP ************************************************************************************************************************
    28. 172.25.32.11 : ok=5 changed=3 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    29. 172.25.32.12 : ok=5 changed=3 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.变量设定和使用方式

    3.1 在playbook中直接定义变量

    1. [admin@ansible .ansible]$ vim user.yml
    2. [admin@ansible .ansible]$ cat user.yml
    3. - name: create user
    4. hosts: westos
    5. vars:
    6. USER1:
    7. NAME: user1
    8. UID: 6666
    9. tasks:
    10. - name: create user1
    11. user:
    12. name: "{{USER1['NAME']}}"
    13. uid: "{{USER1.UID}}"
    1. 测试书写的playbook文件
    2. [admin@ansible .ansible]$ ansible-playbook user.yml
    3. PLAY [create user] ****************************************************************************************************************
    4. TASK [Gathering Facts] ************************************************************************************************************
    5. ok: [172.25.32.12]
    6. ok: [172.25.32.11]
    7. TASK [create user1] ***************************************************************************************************************
    8. changed: [172.25.32.12]
    9. changed: [172.25.32.11]
    10. PLAY RECAP ************************************************************************************************************************
    11. 172.25.32.11 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    12. 172.25.32.12 : ok=2 changed=1 unreachable=0 failed=0

    3.2 在文件中定义变量

    1. 书写palybook文件
    2. [admin@ansible .ansible]$ cat user1.yml
    3. ---
    4. USER1:
    5. NAME: user1
    6. UID: 6666
    7. [admin@ansible .ansible]$ cat user.yml
    8. - name: create user
    9. hosts: westos
    10. vars_files:
    11. - ./user1.yml
    12. tasks:
    13. - name: create user1
    14. user:
    15. name: "{{USER1['NAME']}}"
    16. uid: "{{USER1.UID}}"
    1. 测试书写的文件
    2. [admin@ansible .ansible]$ ansible-playbook user.yml
    3. PLAY [create user] ****************************************************************************************************************
    4. TASK [Gathering Facts] ************************************************************************************************************
    5. ok: [172.25.32.12]
    6. ok: [172.25.32.11]
    7. TASK [create user1] ***************************************************************************************************************
    8. ok: [172.25.32.12]
    9. ok: [172.25.32.11]
    10. PLAY RECAP ************************************************************************************************************************
    11. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    12. 172.25.32.12 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.3 使用变量

    1. tasks:
    2. - name: create user
    3. user:
    4. name: "{{ USER }}"

    3.4 设定主机变量和清单变量

    在定义主机变量和清单变量时使用

    1. [admin@ansible .ansible]$ cat inventory
    2. [westos1]
    3. 172.25.32.11
    4. [westos2]
    5. 172.25.32.12
    6. [westos1:vars]
    7. USER=linux
    1. [admin@ansible .ansible]$ ansible-playbook user.yml
    2. PLAY [create user] ****************************************************************************************************************
    3. TASK [Gathering Facts] ************************************************************************************************************
    4. ok: [172.25.32.11]
    5. TASK [debug] **********************************************************************************************************************
    6. ok: [172.25.32.11] => {
    7. "msg": "linux"
    8. }
    9. PLAY RECAP ************************************************************************************************************************
    10. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.5 目录设置变量

    group_vars           ##清单变量,目录中的文件名称与主机清单名称一致
    host_vars             ##主机变量,目录中的文件名称与主机名称一致

    1. 建立一个自定义目录,在目录中定义变量
    2. [admin@ansible .ansible]$ mkdir group_vars
    3. [admin@ansible .ansible]$ vim group_vars/westos.yml
    4. [admin@ansible .ansible]$ cat group_vars/westos.yml
    5. WESTOS: hello westos
    6. [admin@ansible .ansible]$ cat user.yml
    7. - name: create user
    8. hosts: westos
    9. tasks:
    10. - debug:
    11. msg: "{{WESTOS}}"
    1. 测试在目录中定义的变量
    2. [admin@ansible .ansible]$ ansible-playbook user.yml
    3. PLAY [create user] ****************************************************************************************************************
    4. TASK [Gathering Facts] ************************************************************************************************************
    5. ok: [172.25.32.11]
    6. ok: [172.25.32.12]
    7. TASK [debug] **********************************************************************************************************************
    8. ok: [172.25.32.11] => {
    9. "msg": "hello westos"
    10. }
    11. ok: [172.25.32.12] => {
    12. "msg": "hello westos"
    13. }
    14. PLAY RECAP ************************************************************************************************************************
    15. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    16. 172.25.32.12 : ok=2 changed=0 unreachable=0 failed=0 sk

    3.6 用命令覆盖变量

    ansible-playbook user.yml -e "WESTOS=nihao"

    1. [admin@ansible .ansible]$ ansible-playbook user.yml -e "WESTOS=linux"
    2. PLAY [create user] ****************************************************************************************************************
    3. TASK [Gathering Facts] ************************************************************************************************************
    4. ok: [172.25.32.11]
    5. ok: [172.25.32.12]
    6. TASK [debug] **********************************************************************************************************************
    7. ok: [172.25.32.11] => {
    8. "msg": "linux"
    9. }
    10. ok: [172.25.32.12] => {
    11. "msg": "linux"
    12. }
    13. PLAY RECAP ************************************************************************************************************************
    14. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    15. 172.25.32.12 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.7 使用数组设定变量

    1. 在文件中设置数组变量
    2. [admin@ansible .ansible]$ cat user_var.yml
    3. USER:
    4. lee:
    5. age: 18
    6. obj: linux
    7. westos:
    8. age: 20
    9. obj: java
    10. [admin@ansible .ansible]$ cat user.yml
    11. - name: Create User
    12. hosts: westos
    13. gather_facts: no
    14. vars_files:
    15. ./user_var.yml
    16. tasks:
    17. - name: create user
    18. shell:
    19. echo "{{USER['lee']['age']}}"
    20. echo "{{USER.westos.obj}}"
    1. 测试书写的变量
    2. [admin@ansible .ansible]$ ansible-playbook user.yml -v
    3. Using /home/admin/.ansible/ansible.cfg as config file
    4. PLAY [Create User] ****************************************************************************************************************
    5. TASK [create user] ****************************************************************************************************************
    6. changed: [172.25.32.11] => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python"}, "changed": true, "cmd": "echo \"18\" echo \"java\"", "delta": "0:00:00.001604", "end": "2022-07-30 03:31:54.621472", "rc": 0, "start": "2022-07-30 03:31:54.619868", "stderr": "", "stderr_lines": [], "stdout": "18 echo java", "stdout_lines": ["18 echo java"]}
    7. changed: [172.25.32.12] => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python"}, "changed": true, "cmd": "echo \"18\" echo \"java\"", "delta": "0:00:00.002361", "end": "2022-07-30 03:31:55.165762", "rc": 0, "start": "2022-07-30 03:31:55.163401", "stderr": "", "stderr_lines": [], "stdout": "18 echo java", "stdout_lines": ["18 echo java"]}
    8. PLAY RECAP ************************************************************************************************************************
    9. 172.25.32.11 : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    10. 172.25.32.12 : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.8 注册变量

    register 把模块输出注册到指定字符串中

    1. [admin@ansible .ansible]$ cat westos.yml
    2. - name: test register
    3. hosts: 172.25.32.11
    4. tasks:
    5. - name: hostname command
    6. shell:
    7. hostname
    8. register: info
    9. - name: show messages
    10. shell:
    11. echo "{{info['stdout']}}"
    1. [admin@ansible .ansible]$ ansible-playbook westos.yml -v
    2. Using /home/admin/.ansible/ansible.cfg as config file
    3. PLAY [test register] *******************************************************************************************************************************
    4. TASK [Gathering Facts] *****************************************************************************************************************************
    5. ok: [172.25.32.11]
    6. TASK [hostname command] ****************************************************************************************************************************
    7. changed: [172.25.32.11] => {"changed": true, "cmd": "hostname", "delta": "0:00:00.001995", "end": "2022-07-31 05:14:24.857372", "rc": 0, "start": "2022-07-31 05:14:24.855377", "stderr": "", "stderr_lines": [], "stdout": "www.westos.org", "stdout_lines": ["www.westos.org"]}
    8. TASK [show messages] *******************************************************************************************************************************
    9. changed: [172.25.32.11] => {"changed": true, "cmd": "echo \"www.westos.org\"", "delta": "0:00:00.001784", "end": "2022-07-31 05:14:25.111958", "rc": 0, "start": "2022-07-31 05:14:25.110174", "stderr": "", "stderr_lines": [], "stdout": "www.westos.org", "stdout_lines": ["www.westos.org"]}
    10. PLAY RECAP *****************************************************************************************************************************************
    11. 172.25.32.11 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

    3.9 事实变量

    事实变量是ansible在受控主机中自动检测出的变量
    事实变量中还有与主机相关的信息

    当需要使用主机相关信息时不需要采集赋值,直接调用即可
    因为变量信息为系统信息所以不能随意设定仅为采集信息,故被成为事实变量

    ather_facts: no     ##在playbook中关闭事实变量收集

    ansible westos -m  setup | less  #查看清单中受控机的全部信息

    1. [admin@ansible .ansible]$ cat register.yml
    2. - name: test register
    3. hosts: 172.25.32.11
    4. tasks:
    5. - name: show messages
    6. debug:
    7. msg: "{{ansible_facts['architecture']}}"
    1. [admin@ansible .ansible]$ ansible-playbook register.yml
    2. PLAY [test register] *******************************************************************************************************************************
    3. TASK [Gathering Facts] *****************************************************************************************************************************
    4. ok: [172.25.32.11]
    5. TASK [show messages] *******************************************************************************************************************************
    6. ok: [172.25.32.11] => {
    7. "msg": "x86_64"
    8. }
    9. PLAY RECAP *****************************************************************************************************************************************
    10. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    1. [admin@ansible .ansible]$ ansible westos -m setup | less
    2. 172.25.32.12 | SUCCESS => {
    3. "ansible_facts": {
    4. "ansible_all_ipv4_addresses": [
    5. "172.25.32.12"
    6. ],
    7. "ansible_all_ipv6_addresses": [
    8. "fe80::5054:ff:fefd:53c7"
    9. ],
    10. "ansible_apparmor": {
    11. "status": "disabled"
    12. },
    13. "ansible_architecture": "x86_64",
    14. "ansible_bios_date": "04/01/2014",
    15. ..........

    3.10 魔法便变量

    1. hostvars: ##ansible软件的内部信息
    2. [admin@ansible .ansible]$ ansible localhost -m debug -a "var=hostvars"
    3. localhost | SUCCESS => {
    4. "hostvars": {
    5. "172.25.32.11": {
    6. "WESTOS": "hello westos",
    7. "ansible_check_mode": false,
    8. "ansible_diff_mode": false,
    9. "ansible_facts": {},
    10. "ansible_forks": 5,
    11. "ansible_inventory_sources": [
    12. "/home/admin/.ansible/inventory"
    13. ],
    14. "ansible_playbook_python": "/usr/bin/python2",
    15. "ansible_verbosity": 0,
    16. "ansible_version": {
    17. "full": "2.9.27",
    18. "major": 2,
    19. "minor": 9,
    20. "revision": 27,
    21. "string": "2.9.27"
    22. ..............
    1. group_names: ##当前受管主机所在组
    2. [admin@ansible .ansible]$ ansible localhost -m debug -a "var=group_names"
    3. localhost | SUCCESS => {
    4. "group_names": []
    5. }
    1. groups: ##列出清单中所有的组和主机
    2. [admin@ansible .ansible]$ ansible localhost -m debug -a "var=groups"
    3. localhost | SUCCESS => {
    4. "groups": {
    5. "all": [
    6. "172.25.32.11",
    7. "172.25.32.12"
    8. ],
    9. "ungrouped": [],
    10. "westos": [
    11. "172.25.32.11",
    12. "172.25.32.12"
    13. ]
    14. }
    15. }
    1. inventory_hostname: ##包含清单中配置的当前授管主机的名称
    2. [admin@ansible .ansible]$ ansible localhost -m debug -a "var=inventory_hostname"
    3. localhost | SUCCESS => {
    4. "inventory_hostname": "localhost"
    5. }

    4. JINJA2模板

    介绍:
    Jinja2是Python下一个被广泛应用的模版引擎
    他的设计思想来源于Django的模板引擎,
    并扩展了其语法和一系列强大的功能。
    其中最显著的一个是增加了沙箱执行功能和可选的自动转义功能

    4.1 j2模板书写规则

    {# /etc/hosts line #}       ##注释说明文件用途
    127.0.0.1   localhost     ##文件内容
    {{ ansible_facts['all_ipv4_addresses'] }}    {{ansible_facts['fqdn']}}      ##使用事实变量

    4.2 for循环

    1. vim users.yml
    2. users:
    3. - westos
    4. - linux
    5. - ansible
    6. vim test.j2
    7. {% for NAME in users %}
    8. {{ NAME }}
    9. {%endfor%}

    4.3 if 判定

    1. #if 判定#
    2. {% for NAME in users if not NAME == "ansible" %}
    3. User number {{loop.index}} - {{ NAME }}
    4. {%endfor%}
    5. loop.index ##循环迭代记数从1开始
    6. loop.index0 ##循环迭代计数从0开始
    7. {% for user in students %}
    8. name: {{user['name']}}
    9. {%if user['age'] is defined%}
    10. age: {{user['age']}}
    11. {%endif%}
    12. {% if user['age'] is not defined %}
    13. age: null
    14. {% endif%}
    15. obj: {{user['obj']}}
    16. {%endfor%}

    4.4 j2模板在playbook中的应用

    1. 应用一:
    2. [admin@ansible .ansible]$ cat westos.yml
    3. - name: users
    4. hosts: westos
    5. tasks:
    6. - name: test.j2
    7. template:
    8. src: ./test.j2
    9. dest: /mnt/westos
    10. [admin@ansible .ansible]$ cat test.j2
    11. {% for user in users %}
    12. {{ user }}
    13. {% endfor %}
    14. [admin@ansible .ansible]$ cat host_vars/172.25.32.11.yml
    15. users:
    16. - westos
    17. - lee
    18. - linux
    1. [admin@ansible .ansible]$ ansible-playbook westos.yml
    2. PLAY [users] ***************************************************************************************************************************************
    3. TASK [Gathering Facts] *****************************************************************************************************************************
    4. ok: [172.25.32.12]
    5. ok: [172.25.32.11]
    6. TASK [test.j2] *************************************************************************************************************************************
    7. fatal: [172.25.32.12]: FAILED! => {"changed": false, "msg": "AnsibleUndefinedVariable: 'users' is undefined"}
    8. ok: [172.25.32.11]
    9. PLAY RECAP *****************************************************************************************************************************************
    10. 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    11. 172.25.32.12 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
    12. 受控主机172.25.32.11中:
    13. [root@www mnt]# cat westos
    14. westos
    15. lee
    16. linux
    1. 应用二:
    2. [admin@ansible .ansible]$ cat test.j2
    3. {% for user in users %}
    4. {% if user.obj is defined %}
    5. {{ user.name }} - {{ user.age }} - {{ user.obj }}
    6. {% endif %}
    7. {% if user.obj is not defined %}
    8. {{ user.name }} - {{ user.age }} - NONE
    9. {% endif %}
    10. {% endfor %}
    11. [admin@ansible .ansible]$ cat westos.yml
    12. - name: users
    13. hosts: westos
    14. tasks:
    15. - name: test.j2
    16. template:
    17. src: ./test.j2
    18. dest: /mnt/westos
    19. [admin@ansible .ansible]$ cat host_vars/172.25.32.12.yml
    20. users:
    21. - name: lee
    22. age: 18
    23. obj: linux
    24. - name: westos
    25. age: 20
    1. [admin@ansible .ansible]$ ansible-playbook westos.yml
    2. PLAY [users] ***************************************************************************************************************************************
    3. TASK [Gathering Facts] *****************************************************************************************************************************
    4. ok: [172.25.32.12]
    5. ok: [172.25.32.11]
    6. TASK [test.j2] *************************************************************************************************************************************
    7. fatal: [172.25.32.11]: FAILED! => {"changed": false, "msg": "AnsibleUndefinedVariable: 'ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'name'"}
    8. changed: [172.25.32.12]
    9. PLAY RECAP *****************************************************************************************************************************************
    10. 172.25.32.11 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
    11. 172.25.32.12 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
    12. 受控主机172.25.32.12中:
    13. [root@admin mnt]# cat westos
    14. lee - 18 - linux
    15. westos - 20 - NONE

     5. Ansible的加密控制 

    5.1 创建加密文件

    5.1.1 ansible-vault create westos

    1. [admin@ansible .ansible]$ ansible-vault create westos
    2. New Vault password:
    3. Confirm New Vault password:

    5.1.2 创建加密文件的密码文件

    1. [admin@ansible .ansible]$ vim westos-vault
    2. westos

    5.1.3 查看加密的文件

    1. 直接查看会是一串数字
    2. [admin@ansible .ansible]$ cat westos
    3. $ANSIBLE_VAULT;1.1;AES256
    4. 64663934353161646234373766383133356430653630353564363039663163623538373730366266
    5. 3037303534626562366135393933356666623531386264660a366536616565363330656562343930
    6. 35376132643763656139633362653035386133333565333766613865656233313662663438623638
    7. 3935653530633161360a366537336138373163393835363939366331626137303731613664346165
    8. 3035
    9. 利用刚才创建的密码文件查看
    10. [admin@ansible .ansible]$ ansible-vault view --vault-password-file=westos-valut westos
    11. hello westos

    5.2 加密现有文件

    1. [admin@ansible .ansible]$ ansible-vault encrypt test.j2
    2. New Vault password:
    3. Confirm New Vault password:
    4. Encryption successful

    5.2.1 查看加密的现有文件

    1. [admin@ansible .ansible]$ ansible-vault view --vault-password-file=westos-valut test.j2
    2. {% for user in users %}
    3. {% if user.obj is defined %}
    4. {{ user.name }} - {{ user.age }} - {{ user.obj }}
    5. {% endif %}
    6. {% if user.obj is not defined %}
    7. {{ user.name }} - {{ user.age }} - NONE
    8. {% endif %}
    9. {% endfor %}

    5.3 编辑加密文件

    1. [admin@ansible .ansible]$ ansible-vault edit --vault-password-file=westos-valut westos
    2. 查看编辑的加密文件
    3. [admin@ansible .ansible]$ ansible-vault view --vault-password-file=westos-valut westos
    4. hello westos
    5. hello linux

    5.4 解密文件

    1. 文件永久解密
    2. [admin@ansible .ansible]$ ansible-vault decrypt test.j2
    3. Vault password:
    4. Decryption successful
    5. [admin@ansible .ansible]$ cat test.j2
    6. {% for user in users %}
    7. {% if user.obj is defined %}
    8. {{ user.name }} - {{ user.age }} - {{ user.obj }}
    9. {% endif %}
    10. {% if user.obj is not defined %}
    11. {{ user.name }} - {{ user.age }} - NONE
    12. {% endif %}
    13. {% endfor %}
    14. 文件解密保存为linux
    15. [admin@ansible .ansible]$ ansible-vault decrypt westos --output=linux
    16. Vault password:
    17. Decryption successful
    18. [admin@ansible .ansible]$ cat linux
    19. hello westos
    20. hello linux

    5.5 更改密码

    1. 第一种方法:
    2. [admin@ansible .ansible]$ ansible-vault rekey linux
    3. Vault password:
    4. New Vault password:
    5. Confirm New Vault password:
    6. Rekey successful
    7. 第二种方法:
    8. [admin@ansible .ansible]$ vim linux-vault
    9. [admin@ansible .ansible]$ cat linux-vault
    10. linux
    11. [admin@ansible .ansible]$ ansible-vault rekey linux --new-vault-password-file=linux-vault
    12. Vault password:
    13. Rekey successful
    14. [admin@ansible .ansible]$ ansible-vault view --vault-password-file=linux-vault linux
    15. hello westos
    16. hello linux
  • 相关阅读:
    java 读取resource下的文件
    宝宝每天需要补充多少钙?宝宝睡觉出汗枕秃是缺钙吗?
    【附源码】计算机毕业设计SSM万达影院售票管理系统
    lvs集群(一)
    微信小程序封装全局加载动画loading
    STC15L2K32S2芯片介绍与实验板原理图分析
    5G(3)5G NR的物理资源
    Pycharm VSCode快捷键设置 Duplicate CopyLine Down
    LightGBM高级教程:深度集成与迁移学习
    STM32 Cube SPI通信实战开发调试--电源项目SPI通信
  • 原文地址:https://blog.csdn.net/weixin_66461008/article/details/126064493