变量 加密
一.变量命名
只能包含数字，下划线，字母
只能用下划线或字母开头
二.变量级别
全局: 从命令行或配置文件中设定的
paly: 在play和相关结构中设定的
主机: 由清单，事实收集或注册的任务
变量优先级设定：
狭窄范围有限与广域范围
三.变量设定和使用方式
[devops@westos_student29 ansible]$ cat haha.yml
---
USERS:
- oo
- pp
[devops@westos_student29 ansible]$ cat oo.yml
---
- name:
hosts: all
vars_files: ./haha.yml ##指定变量所在文件
tasks:
- name: user
user:
name: "{{ item }}" ##循环
state: present
loop:
"{{ USERS }}" ##循环你文件中的变量
debug ## 调试中输出信息
msg ##调试输出的消息
[devops@westos_student29 ansible]$ cat haha.yml
---
westos: HELLO WESTOS
[devops@westos_student29 ansible]$ cat oo.yml
---
- name:
hosts: all
vars_files: ./haha.yml
tasks:
- name: haha
debug:
msg: "{{ westos }}" ##输出westos里面的信息
1.目录设定变量#
group_vars ##清单变量,目录中的文件名称与主机清单名称一致
///
mkdir group_vars
vim westos
///
[devops@westos_student29 group_vars]$ cat westos
---
USER: test
///
cd ansible/
[devops@westos_student29 ansible]$ cat user.yml
---
- name:
hosts: all
tasks:
- name: user
user:
name: "{{ USER }}"
state: present
host_vars ##主机变量，目录中的文件名称与主机名称一致
[devops@westos_student29 ansible]$ mkdir host_vars
[devops@westos_student29 ansible]$ vim host_vars/172.25.29.10
---
USER: linux
[devops@westos_student29 ansible]$ ansible-playbook user.yml ##只针对10这台主机生效
2.用命令覆盖变量#
ansible-playbook user.yml -e “USER=hello”
3.设定主机变量和清单变量
vim inventory
[westos_list1]
172.25.0.254
172.25.0.1
[westos_list2]
172.25.0.2
[westos_list3]
172.25.0.3
[westos_group:children]
westos_list2
westos_list3
[westos_list1:vars]
USER=westos1
[westos_group:vars]
USER=westos2
4.使用数组设定变量
测试：
create web vhost
www.westos.com 80 ------ > /var/www/html ------> www.westos.com
linux.westos.com 80 ------> /var/www/virtual/westos.com/linux -----> linux.westos.com
---
- name:
vars_files: ./ll.yml
hosts: all
tasks:
- name: install httpd
dnf:
name: httpd
state: latest
- name: dir
file:
path: "{{ item.doc }}"
state: directory
loop:
"{{ WEBS }}"
- name: file
copy:
dest: "{{ item.doc }}/index.html"
content: "{{item.index}}"
loop:
"{{ WEBS }}"
- name:
file:
path: /etc/httpd/conf.d/zzw.conf
state: absent
- lineinfile:
path: /etc/httpd/conf.d/zzw.conf
line: |+
<VirtualHost _default_:80>
DocumentRoot /var/www/html
</VirtualHost>
insertbefore: BOF
create: yes
- lineinfile:
path: /etc/httpd/conf.d/zzw.conf
line: |+
<VirtualHost *:80>
ServerName "{{item.web}}"
DocumentRoot "{{item.doc}}"
</VirtualHost>
loop:
"{{ WEBS }}"
- name: service
service:
name: httpd
enabled: yes
- name: firewalld
firewalld:
service: http
permanent: yes
state: enabled
immediate: yes
5.注册变量
#register 把模块输出注册到指定字符串中
vim register.yml
///
---
- name: test play
hosts: westos
tasks:
- name: shell
shell: echo hello westos
register: westos ##将以上所有输出赋值给westos
ignore_errors: yes
- debug:
msg: " {{westos}} "
///
##ok: [172.25.254.214] => {
“msg”: " {‘cmd’: ‘echo hello westos’, ‘stdout’: ‘hello westos’,
捕捉某个变量
msg: " {{westos[‘stdout’]}} "
##ok: [172.25.254.214] => {
“msg”: " hello westos "
}
6.事实变量
事实变量是ansible在受控主机中自动检测出的变量
事实变量中还有与主机相关的信息
当需要使用主机相关信息时不需要采集赋值，直接调用即可
因为变量信息为系统信息所以不能随意设定仅为采集信息，故被成为事实变量
- name: test register
hosts: 172.25.0.254
tasks:- name: show messages
debug:
msg: “{{ansible_facts[‘architecture’]}}”
- name: show messages
gather_facts: no ##在playbook中关闭事实变量收集
vim fact.vml
///
---
- name: test play
hosts: westos
tasks:
- name: show
debug:
msg: "{{ ansible_facts['nodename']}}"
///
vim fact.yml
///
hosts: westos
gather_facts: no
tasks:
///
报错
7.魔法变量
hostvars: ##ansible软件的内部信息
#eg:
ansible localhost -m debug -a “var=hostvars”
group_names: ##当前受管主机所在组
#eg:
ansible localhost -m debug -a “var=group_names”
groups: ##列出清单中所有的组和主机
#eg:
ansible localhost -m debug -a “var=groups”
inventory_hostname: ##包含清单中配置的当前授管主机的名称
#eg:
ansible localhost -m debug -a “var=inventory_hostname”
四.JINJA2模板
1.介绍
Jinja2是Python下一个被广泛应用的模版引擎
他的设计思想来源于Django的模板引擎，
并扩展了其语法和一系列强大的功能。
其中最显著的一个是增加了沙箱执行功能和可选的自动转义功能
2.j2模板书写规则
{# /etc/hosts line #} ##注释说明文件用途
127.0.0.1 localhost ##文件内容
{{ ansible_facts[‘all_ipv4_addresses’] }} {{ansible_facts[‘fqdn’]}} ##使用事实变量
使用：
vim example.j2
///
{# test file #} ##注释
hello westos
///
vim use_j2.yml
///
---
- name: test j2
hosts: westos
tasks:
- name: create test file
template: ##使用JINJIA2模板
src： ./example.j2 ##模板
dest: /mnt/test ##执行结束后结果保存位置
///
ansible-playbook use_j2.yml
作用：
可以使用ansible的所有变量，比如复制文件可以使用copy模块，但是当需要使用变量时，便可以使用JINJIA2。
假如做解析
cp /etc/hosts hosts.j2
ansible westos -m setup | less ##查看主机信息
vim hosts.j2
///
{{ ansible_facts[‘ens3’][‘ipv4’][‘address’] }} {{ ansible_facts[‘fqdn’] }} {{ansible_facts[‘hostname’] }}
##IP，主机名，主机短名称
///
假如做解析
cp /etc/hosts hosts.j2
ansible westos -m setup | less ##查看主机信息
vim hosts.j2
///
{{ ansible_facts['ens3']['ipv4']['address'] }} {{ ansible_facts['fqdn'] }} {{ansible_facts['hostname'] }} ##IP，主机名，主机短名称
///
vim use_j2.yml
///
---
- name: test j2
hosts: westos
tasks:
- name: create test file
template:
src: ./hosts.j2
dest: /mnt/hosts
///
ansible-playbook use_j2.yml
3.for循环
vim users.yml
---
users:
- westos
- linux
- ansible
vim for.j2
{% for NAME in users %}
{{ NAME }}
{%endfor%}
vim use_j2.yml
---
- name: test j2
vars_files: ./users.yml
hosts: westos
tasks:
- name: create test file
template:
src: ./for.j2
dest: /mnt/for
///
ansible-playbook use_j2.yml
迭代计数
vim loop.j2
{% for NAME in users %}
{{loop.index}}{{ NAME }} ##记录循环的次数(index表示从1开始计数，如果index0表示从0开始计数)
{%endfor%}
///
vim use_j2.yml
---
- name: test j2
vars_files: ./users.yml
hosts: westos
tasks:
- name: create test file
template:
src: ./loop.j2
dest: /mnt/loop
///
ansible-playbook use_j2.yml
4.if 判定
{% for NAME in users if not NAME == “ansible” %}
User number {{loop.index}} - {{ NAME }}
{%endfor%}
loop.index ##循环迭代记数从1开始
loop.index0 ##循环迭代计数从0开始
{% for user in students %}
name: {{user[‘name’]}}
{%if user[‘age’] is defined%}
age: {{user[‘age’]}}
{%endif%}
{% if user[‘age’] is not defined %}
age: null
{% endif%}
obj: {{user[‘obj’]}}
{%endfor%}
vim if.j2
{% for NAME in users %}
{% if NAME in "linux" %}
{{loop.index0}}
{% endif %}
{% if NAME not in "linux" %}
{{ loop.index0 }}{{ NAME }}
{% endif %}
{% endfor %}
vim use_j2.yml
---
- name: test j2
vars_files: ./users.yml
hosts: westos
tasks:
- name: create test file
template:
src: ./if.j2
dest: /mnt/if
///
ansible-playbook use_j2.yml
5.j2模板在playbook中的应用
#playbook1
- name: test register
hosts: xxxx
tasks:- name: create hosts
template:
src: ./xxxx.j2
dest: /mnt/hosts
- name: create hosts
#playbook2
-
name: test.j2
hosts: 172.25.0.254
vars:
students:
- name: student1
obj: linux
- name: student2
age: 18
obj: linuxtasks:
- template:
src: ./test.j2
dest: /mnt/list
- template:
练习：在所有受控主机生成所有受控主机的ip与主机
cp /etc/hosts hosts.j2
ansible westos -m setup | less ##查看主机信息
vim hosts1.j2
///
{%for WESTOS in groups['all']%}
{{ hostvars[WESTOS]['ansible_facts']['ens3']['ipv4']['address'] }} {{hostvars[WESTOS]['ansible_facts']['fqdn'] }} {{hostvars[WESTOS]['ansible_facts']['hostname'] }} ##IP，主机名，主机短名称
{%endfor%}
///
vim hosts.yml
///
---
- name: hosts
hosts: westos
tasks:
- name: create test file
template:
src: ./hosts1.j2
dest: /mnt/hosts1
///
ansible-playbook hosts.yml
五.Ansible的加密控制
#创建建立文件
1.
ansible-vault create westos
vim westos-vault
lee
ansible-vault create --vault-password-file=westos-valut westos
#加密现有文件
ansible-vault encrypt test
#查看加密文件
ansible-vault view westos
ansible-vault view --vault-password-file=westos-valut westos
#编辑加密文件
ansible-vault edit westos1
ansible-vault edit --vault-password-file=westos-valut westos
##解密文件
ansible-vault decrypt westos ##文件永久解密
ansible-vault decrypt westos --output=linux ##文件解密保存为linux
##更改密码
ansible-vault rekey westos1
ansible-vault rekey westos1 --new-vault-password-file=key1
#playbook#
ansible-playbook apache_install.yml --ask-vault-pass
195
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
