Ansible循环与判断

循环

with_items迭代列表

Linux中依次需要安装多个软件包时，我们可以使用with_items迭代功能进行实现
例如：
安装httpd、samba、samba-client软件包

[student@ansible ansible]$ vim t.yml
---
- name: install packages
  hosts: node1
  tasks:
    - name: yum_repo1
      yum_repository:
        file: local
        name: BaseOS
        description: BaseOS
        baseurl: file:///mnt/BaseOS
        enabled: yes
        gpgcheck: no
 
    - name: yum_repo2
      yum_repository:
        file: local
        name: AppStream
        description: AppStream
        baseurl: file:///mnt/AppStream
        enabled: yes
        gpgcheck: no
 
    - name: mount cdrom
	  mount:
        src: /dev/sr0
        path: /mnt
        fstype: iso9660
        state: mounted
 
    - name: install pks
      yum:
        name: "{{ item }}"
        state: present
      with_items:
        - httpd
        - samba
        - samba-client

with_dict迭代字典

item.key对应着是字典的键，item.value对应着字典的值

[student@ansible ansible]$ vim e.yml
---
- name: test
  hosts: node1
  tasks:
    - name: debug
      debug:
        msg: "{{ item.key }} & {{ item.value }}"
      with_dict: 
        address: 1
        netmask: 2
        gateway: 3

with_fileglob迭代文件

拷贝多个文件到受控主机上时，可以使用

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  tasks:
    - name: cp file
      copy:
        src: "{{ item }}"
        dest: /tmp/
      with_fileglob:
        - /tmp/*.sh
        - /tmp/*.py

with_lines迭代行

with_lines可以将命令行的输出结果按行迭代

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  tasks:
    - name: cp file
      copy:
        src: "{{ item }}"
        dest: /tmp/
      with_lines:
        - find  /etc/ansible  -name  "*.yml"

Loop

现在loop已经替代了with，更多的是loop配合过滤器进行使用
常用字符串有关的过滤器

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  vars:
    testvar: "abc6484FSDA12516"
    testvar1: " abc "
  tasks:
    - name: debug1
      debug:
        msg: "{{ testvar | upper }}"				#upper将字符串转换成纯大写
 
    - name: debug2
      debug:
        msg: "{{ testvar | lower }}"				#lower将字符串转换成纯小写
 
    - name: debug3
      debug:
        msg: "{{ testvar1 | trim }}"     			#trim将字符串的首尾空格去掉
 
    - name: debug4
      debug:
        msg: "{{ testvar | length }}"				#length求字符串的长度

使用加密算法对字符串进行hash加密
创建一个用户，并且设置密码为redhat，密码采用SHA512哈希格式

[student@ansible ansible]$ vim test.yml
---
- name: create user
  hosts: node1
  tasks:
    - name: create ttt
      user:
        name: ttt
        password: "{{ 'redhat' | password_hash('sha512') }}"

和数字操作有关的过滤器

[student@ansible ansible]$ vim test.yml
---
- name: this playbook
  hosts: servera
  vars:
    testvar4: -1
  tasks:
  - name: conversion init
    debug:
      msg: "{{ 8+('8' | int) }}"				#将对应的值转换成int类型
     											#ansible中，字符串和整形不能直接计算，比如{{ 8+'8' }}会报错
      											#所以，我们可以把一个值为数字的字符串转换成整形后再做计算
      											
  - name: not conversion init
    debug:
      msg: "{{ 'a' | int(default=6) }}"			#将对应的值转换成int类型,如果无法转换,默认返回0
      											#使用int(default=6)或者int(6)时，如果无法转换则返回指定值6
      											
  - name: conversion float
    debug:
      msg: "{{ '8' | float }}"  				#将对应的值转换成浮点型，如果无法转换，默认返回'0.0'
      
  - name: not conversion float
    debug:
      msg: "{{ 'a' | float(8.88) }}"			#当对应的值无法被转换成浮点型时，则返回指定值’8.88‘
      
  - name: absolute
    debug:
      msg: "{{ testvar4 | abs }}"				#获取对应数值的绝对值 
      
  - name: rounding
    debug:
      msg: "{{ 12.5 | round }}"					#四舍五入 
      
  - name: rouding behind 5
    debug:
      msg: "{{ 3.1415926 | round(5) }}"			#取小数点后五位  
      
  - name: random
    debug:
      msg: "{{ 100 | random }}"					#从0到100中随机返回一个随机数
      
  - name: random2
    debug:
      msg: "{{ 10 | random(start=5) }}"			#从5到10中随机返回一个随机数
      
  - name: random step3
    debug:
      msg: "{{ 15 | random(start=5,step=3) }}"			#从5到15中随机返回一个随机数,步长为3
      												 	#步长为3的意思是返回的随机数只有可能是5、8、11、14中的一个
      
  - name: random multiple is 5
    debug:
      msg: "{{ 15 | random(step=5) }}"					#从0到15中随机返回一个随机数,这个随机数是5的倍数

文件或目录类过滤器

[student@ansible ansible]$ vim test.yml
---
- name: 文件或目录类的过滤器
  hosts: servera
  tasks:
     - name: 使用sha1算法对字符串进行哈希
       debug:
          msg: "{{ '123456' | hash('sha1') }}"
     - name: 使用md5算法对字符串进行哈希
       debug:
          msg: "{{ '123456' | hash('md5') }}"
 
     - name: 获取到字符串的校验和,与md5哈希值一致
       debug:
          msg: "{{ '123456' | checksum }}"
     - name: 使用sha256算法对字符串进行哈希,哈希过程中会生成随机"盐",以便无法直接对比出原值
       debug:
          msg:  "{{ '123456' | password_hash('sha256') }}"
     - name: 使用sha256算法对字符串进行哈希,并使用指定的字符串作为"盐"
       debug:
          msg: "{{ '123456' | password_hash('sha256','mysalt') }}"
 
     - name: 使用sha512算法对字符串进行哈希,哈希过程中会生成随机"盐",以便无法直接对比出原值
       debug:
          msg: "{{ '123123' | password_hash('sha512') }}"
 
     - name: 使用sha512算法对字符串进行哈希,并使用指定的字符串作为"盐"
       debug:
          msg: "{{ '123123' | password_hash('sha512','ebzL.U5cjaHe55KK') }}"

ansible判断

判断运算符：“==”、“!=”、“>”、“<”、“>=”、“<=”、“and”、“or”、“not”、is、in

每次执行完一个任务，不管成功与失败，都会将执行的结果进行注册，可以使用这个注册的变量来进行when

判断变量：
Defined：判断变量是否已经定义，已定义则返真
Undefined：判断变量是否已经定义，未定义则返真
None：判断变量值是否为空，如果变量已经定义，但是变量值为空，则返真

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  vars:
    aa: 11
    cc:
  tasks:
    - name: create debug1
      debug:
        msg: a
      when: aa is defined
 
    - name: create debug2
      debug:
        msg: ab
      when: bb is undefined
 
    - name: create debug3
      debug:
        msg: abc
      when: cc is none

判断执行结果：
Success/successed:通过任务的返回信息判断执行状态，任务执行成功返回真
Failure/failed：通过执行任务的返回信息判断执行状态，任务执行失败则返回真
Change/changed：通过任务的返回信息判断执行状态，任务返回状态为changed则返回真
Skip/skipped：通过任务的返回信息判断执行状态，当任务没有满足条件，而被跳过执行，则返回真。

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  vars:
    aa: 11
  tasks:
    - name: shell
      shell:
        cmd: ls /mnt
      when: aa == 11
      register: dd
 
    - name: create debug1 success
      debug:
        msg: chenyu success
      when: dd is success
 
    - name: create debug2 fail
      debug:
        msg: chenyu failed
      when: dd is failed
 
    - name: create debug3 change
      debug:
        msg: chenyu changed
      when: dd is changed
 
    - name: create debug4 skip
      debug:
        msg: chenyu skip
      when: dd is skip

判断路径: 以下判断均对ansible主机中的路径，与目标主机无关
file：判断路径是否是一个文件
directory：判断路径是否是一个目录
link：判断路径是否是一个软连接
mount：判断路径是否是一个挂载点
exists：判断路径是否存在

[student@ansible ansible]$ vim test.yml
 ---
- name: test
  hosts: node1
  vars:
    a1: /test/file1
    a2: /test/
    a3: /test/softlinka
    a4: /test/hardlinka
    a5: /boot/
  tasks:
    - name: debug1
      debug:
        msg: this is file
      when: a1 is file
 
    - name: debug2
      debug:
        msg: "this is directory"
      when: a2 is directory
 
    - name: debug3
      debug:
        msg: "this is softlink"
      when: a3 is link
 
    - name: debug4
      debug:
        msg: "this is hardlink"
      when: a4 is link
 
    - name: debug5
      debug:
        msg: "this is mount directory"
      when: a5 is mount
 
    - name: debug6
      debug:
        msg: "this is exists"
      when: a1 is  exists

判断字符串:
lower：判断包含字母的字符串中的字母是否纯小写
upper：判断包含字母的字符串中的字母是否纯大写

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  vars:
    a1: abc
    a2: ABC
    a3: a1b
  tasks:
    - name: debug1
      debug:
        msg: this string is all lower
      when: a1 is lower
 
    - name: debug2
      debug:
        msg: this string is all upper
      when: a2 is upper
 
    - name: debug3
      debug:
        msg: sss
      when: a3 is lower

其他:
string：判断对象是否是一个字符串
number：判断对象是否一个数字

[student@ansible ansible]$ vim test.yml
---
- name: test
  hosts: node1
  vars:
    a1: 1
    a2: "1"
    a3: a
  tasks:
    - name: debug1
      debug:
        msg: this is number
      when: a1 is number
 
    - name: debug2
      debug:
        msg: this is string
      when: a2 is string
 
    - name: debug3
      debug:
        msg: this is string
      when: a3 is string

实例

block/rescue/always: 限制性block，如果执行失败，则执行rescue，无论是block还是rescue执行失败还是成功，在最后都执行always

给node1添加一块5G的硬盘
给node2添加一块2G的硬盘
node3不添加硬盘

写一个partition.yml的playbook，满足如下要求：
给所有的受控主机创建分区，创建2500M的分区，然后对分区进行格式化，格式化为xfs的文件系统。
如果不能满足创建2500M的分区，则显示错误消息为：disk size not enough，接着改为创建1000M。
如果没有/dev/sdb硬盘，则显示错误消息为：the device is not sdb

[student@ansible ansible]$ vim partition.yml
---
- name: parted test
  hosts: all
  tasks:
    - name: create parted
      block:
        - name: create parted 2500M
          parted:
            device: /dev/sdb
            number: 1
            part_type: primary
            part_start: 10MiB
            part_end: 2510MiB
            state: present

      rescue:
        - name: fail
          debug:
            msg: disk size not enough

        - name: create parted 1000M
          parted:
            device: /dev/sdb
            number: 1
            part_type: primary
            part_start: 10MiB
            part_end: 1010MiB
            state: present

      always:
        - name: format sdb1
          filesystem:
            dev: /dev/sdb1
            fstype: xfs
      when: "ansible_devices.sdb is defined"

    - name: sdb not exists
      debug:
        msg: the device is not sdb
      when: "ansible_devices.sdb is not defined"

[student@ansible ansible]$ ansible-playbook partition.yml

PLAY [parted test] **********************************************************************************************************************************************************************************************

TASK [Gathering Facts] ******************************************************************************************************************************************************************************************
ok: [node3]
ok: [node1]
ok: [node2]

TASK [create parted 2500M] **************************************************************************************************************************************************************************************
skipping: [node3]
fatal: [node2]: FAILED! => {"changed": false, "err": "Error: The location 2510MiB is outside of the device /dev/sdb.\n", "msg": "Error while running parted script: /sbin/parted -s -m -a optimal /dev/sdb -- unit KiB mklabel msdos mkpart primary 10MiB 2510MiB", "out": "", "rc": 1}
changed: [node1]

TASK [fail] *****************************************************************************************************************************************************************************************************
ok: [node2] => {
    "msg": "disk size not enough"
}

TASK [create parted 1000M] **************************************************************************************************************************************************************************************
changed: [node2]

TASK [format sdb1] **********************************************************************************************************************************************************************************************
skipping: [node3]
changed: [node2]
changed: [node1]

TASK [sdb not exists] *******************************************************************************************************************************************************************************************
skipping: [node1]
skipping: [node2]
ok: [node3] => {
    "msg": "the device is not sdb"
}

PLAY RECAP ******************************************************************************************************************************************************************************************************
node1                      : ok=3    changed=2    unreachable=0    failed=0    skipped=1    rescued=0    ignored=0
node2                      : ok=4    changed=2    unreachable=0    failed=0    skipped=1    rescued=1    ignored=0
node3                      : ok=2    changed=0    unreachable=0    failed=0    skipped=2    rescued=0    ignored=0

[student@ansible ansible]$ for i in node1 node2 node3; do ssh root@$i lsblk |grep sdb; done
sdb           8:16   0     5G  0 disk
└─sdb1        8:17   0   2.5G  0 part
sdb           8:16   0     2G  0 disk
└─sdb1        8:17   0  1000M  0 part