Re: [ansible-project] Re: Galaxy - Install Role from Subdirectory of Github Repo

[Javier Palacios]

If you don't mind making a tarball with the roles, you can use
https://github.com/javiplx/ansible-library/, which is basically a install
only private galaxy server, from where you can serve your packaged roles
(so, it doesn't matter the tree where they live).

Javier Palacios

On Fri, Mar 18, 2016 at 11:45 PM, Franklin Wise 
wrote:

> However, there's another use case where the support would be helpful.
> Which is keeping the ansible role in the same repo as the application it
> installs.  So if I have github.com/myuser/mycoolapi.git I might want to
> keep the ansible role in a folder within the same mycoolapi that way the
> role can be versioned with the code it installs.  Thoughts?
>
> On Thursday, February 25, 2016 at 12:37:17 PM UTC-5, Nick Allen wrote:
>>>
>>>
>>> I have a Github repository that contains multiple roles, each in
>>> separate subdirectories.  For example, I have separate roles 'role-alpha'
>>> and 'role-beta' in a repo at https://github.com/whoami/project.git each
>>> located in subdirectories as follows.
>>>
>>>- provisioning/roles/role-alpha
>>>- provisioning/roles/role-beta
>>>
>>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUS-hsvdEnG%3DCWG%3DdXdOrpPSAaibRDp89S25mpBmyMNznQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: galaxy alike server for private roles

[Javier Palacios]

On Thu, Mar 3, 2016 at 9:52 PM, Steven Ringo  wrote:

> Hi Javier,
>
> Galaxy should work with your own repos:
>
>
> https://opencredo.com/reusing-ansible-roles-with-private-git-repos-and-dependencies/
>

I've seen that article, but requirements file will only work if I have one
repo with one role on the top level. Currently I have one repo with
multiple generic roles (not in toplevel) and also some roles included in
the same repo than the code they deploy (also out of top level). The first
one could be splited to match standards, but not the second. And I still
have the issue that, as they are in private repositories, I need to arrange
permission to clone/download.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUT48DpGDLaxn-Mu0yZ_5A-sOz%3DWzdpApHc63LQyQR3dQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] galaxy alike server for private roles

[Javier Palacios]

As I wanted to be able to easily install roles that couldn't be available
through galaxy on single public github repos, and as I didn't find any tool
capable of that, I've written one myself. It is available at
https://github.com/javiplx/ansible-library/ and it is a minimal
implementation of the galaxy API capable to install roles (this is,
'ansible-galaxy install xxx' works against it).

It will not work wit stock ansible but needs small patches both for 2.x (
https://github.com/ansible/ansible/pull/14779) and 1.x (
https://github.com/ansible/ansible/pull/14780), which I've just submitted
as pull requests.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUQc6DmX_5RkNQVSjuMrCJxSDG1saiXuwKjEUFNTSf2MXw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] How do I get the Ansible plugin to work with Jenkins?

[Javier Palacios]

With the setup you describe, you have basically two jenkins-aware options.
One, which is closer to what you are currently making, is to give ssh
permission from jenkins to ansible servers. In that case you will need also
one of the plugins that allows Jenkins to execute ssh commands in a
different node (ssh-plugin or similar one) and use it instead of standard
shell command box, _but_ the remote node has no access to whatever lives at
the jenkins server, and will only access whatever exists at the ansible
server unless you explicitly copy it (it's just ssh after all). The second
approach which is the one that will probably behave as you expect, is to
make the ansible server a Jenkins slave, and configure all ansible jobs to
be executed in that slave with standard shell command box, you can drop the
ssh stuff and run the slave as a user capable to run ansible, but security
implications are not actually higher than giving ssh access (except maybe
firewall ports). In this setup the workspace lives at the ansible (slave)
server, but it is transparent to you because everything else is stored at
jenkins (master) server.

On Wed, Feb 3, 2016 at 2:46 AM, Kiran  wrote:

> My Ansible (version 1.9.5) server is on its own dedicated CentOS 7
> server.  My Jenkins (version 1.6) server is on its own dedicated CentOS 7
> server.  I installed the Ansible plugin for Jenkins.  I created a New Item
> that invokes an ad-hoc Ansible command.  For the Ansible Installation
> field, I enter the DNS name of the Ansible server.  For host pattern, I
> chose the group of servers that I want the Ansible playbook to run again.
> The group name was defined in the .../ansible/hosts file.
>
> The console output of this new Jenkins job that should invoke an ansible
> command (on a separate server with Ansible installed) says this:
>
> "Building in workspace /var/lib/jenkins/jobs/... $ sshpass ** /ansible
> ... DNSnameOfAnsibleServer -i ... FATAL: command execution failed
> hudson.AbortException: Ansible Ad-Hoc command execution failed at
> org.jenkinsci.plugins.ansible.AnsibleAdHocCommandBuilder.perform(AnsibleAdHocCommandBuilder.java:176
> at ..."
>
> Does the Ansible server need sshpass? The Jenkins server has sshpass.
>
> How do I get Jenkins to invoke an ansible playbook on an Ansible server?
> This error makes me think that something is wrong with sshpass.  I can view
> the man page of sshpass.  Is there a certain version that I need?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/32c8703f-1d00-401e-8b67-0c8e97aac28d%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpURu%2BsqEsGqdME8sqx9Z1vBM1PfZz6j2Dq9XdAC%2Bn7Hn-g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] variables overriding in dependent role in version 1.9.x

[Javier Palacios]

Not used 1.7, only 1.9. And my experience is that only variables defined on
defaults/main.yml on dependant role can be overridden. I usually use
group_vars to override them, but in a few corner cases the only way I found
to achieve what you pretend to do is to override them at the playbook
level, and only when defined whithin the role definition (see below) and
not in the playbook vars block (my tree is far more complex that only
parent and children).
I did just consider it an annoyance, but as you state that it worked on 1.7
(and is what I expected at the beginning), it could be probably a bug.

- hosts: ...
  roles:
- role:
  var_foo: value

On Tue, Jan 26, 2016 at 12:06 PM, Hleb Valoshka <375...@gmail.com> wrote:

> Hi all.
>
> I have role_a and role_b which depends on role_a.
>
> role_a defines variable var_foo (in vars/main.yml), role_b wants to
> redefine it (in its own vars/main.yml). With 1.7.2 this works, but with
> 1.9.[24] - not.
>
> I've tried to pass required variable through meta (- {role: role_a,
> var_foo: "{{ var_foo }}"}) but this doesn't work as well.
>
> So whether I'm doing it wrong or 1.9 is buggy?
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUQHc95J_cPg9QsYFWi5o1yKd3QvRPdMOYFyc8-6Z-NjCw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: Does the ansible-playbook command can be run in background ?

[Javier Palacios]

On Wed, Dec 30, 2015 at 3:40 AM, chris meyers 
wrote:

> Please be more specific. What is nohup lacking that salt --async has that
> you would like?
>

Ansible is interactive by nature, so it uses stdin. Using nohup will only
work if the playbook runs very nicely. Any arising question (for example,
accept an unknown ssh key) will stop the playbook. So I believe that one of
the the ´async´ functionalities missing is handling playbook questions.
If the use of nohup is just to capture both stdout & stderr, there are
other ways to do it.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpURt8dYkTys-mf%2By6DrJG%3DQ%2BrU%2B0EMRu6wTQ-d39s9gKzQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Manage SSh-Keys

[Javier Palacios]

If you are using 1.9, there is a "exclusive" parameter that I believe makes
exactly what you want, although it will force you into some extra work if
you want multiple allowed keys

Javier Palacios

On Wed, Oct 21, 2015 at 12:20 PM, DrDth  wrote:

> Hello Ansible Community,
>
> I'm working on a possebility to manage different ssh public keys to
> different servers. I try to accomplish that with the most efficient and
> automated solution. My problem is that i want to lookup the files directly
> with a loop variable. Therefore I use the lookup plugin logically. But I
> want the keys I choose to be the only ones in the authorized_keys file on
> the remote machine. So is there a chance to use the exclusive parameter of
> the authorized keys module with a loop variable which uses the lookup
> module?
>
> Thank you for your time!
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/3e4a49cc-772a-45a5-a76f-6394453dad08%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/3e4a49cc-772a-45a5-a76f-6394453dad08%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUS4FNyZ4XRGRfZiaise29Q8hneDE7Bgv8p8BvWSWsf7dQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: lineinfile Best Practice?

[Javier Palacios]

Hello Josef,

you might have a look to the augeas role. I've not used it with ansible but
with puppet, and if you are changing a standard configuration file is
probably the best approach. Even if you don't want to use the role, use
augeas with a 'command' might also help

Javier Palacios

On Tue, Oct 20, 2015 at 11:47 PM, Josef Fortier 
wrote:

> Hi Esco:
>
> On Tuesday, October 20, 2015 at 3:31:11 PM UTC-5, esco real wrote:
> could you explain what exactly the problem is here? Maybe posting some
> examples with actual/ and expected results?
>
> Nothing insurmountable. Just trying to formulate in my own mind what works
> the best. I was/am able to work around the issues I'll detail, but I'd
> rather have had a uniform approach up front.
>
> First Issue: pre-existing relayhost on a handful of servers.
> I used regex: to catch the empty hosts
> Unintended result, hosts with existing relayhost had two set.
>
> Second issue: Too loose/tight regex (either or both).
> Correcting the first issue either led to duplication's or just updated the
> duplicates to uniform values.
>
> It looks like backrefs is a partial fix for this, but after a little
> reflection I realized that in this case (and many other cases like it) my
> best approach is to create two rules, one that deletes the line first, and
> then a role to add it. In particular this catches multiple lines in file.
> It's also easier to get the regex correct (i.e, "delete all other lines
> that might set the var")
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/251451e7-2c36-4576-938e-acf548938978%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/251451e7-2c36-4576-938e-acf548938978%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUQmk0o41Lf_DAeoAuzj1GVXoRdu5-OBvjzDnOX2vn2gcg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: How do you structure Playbooks to Handle Managing Many Applications with Many Environments?

[Javier Palacios]

On Mon, Oct 19, 2015 at 3:42 PM, Corwin Brown  wrote:

>
> That is clever, I really dig that! We handle the puppet deployments (Which
> I'm currently replacing, one by one) in a very similar manner, so just
> porting that process over makes a lot of sense. Do you just maintain all of
> that information in flat files on disk, or in a database somewhere? I
>

For now, it is only on the inventory itself. I use a directory for
inventory, so that each individual group has its own file. That implies
less management overhead that a single file, and makes very easy add new
nodes just by dropping their names in the proper files (although removal is
not so straightforward). For large deployments a database (I prefer
LDAP) could be good permanent storage, but in our case we are not on that
way yet, because the inventory is not too hard to construct from scratch
using node names and some EC2 tags that we define.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUSwOYh4g%2B2O3A6NdhZFvcOOUf3H1J9iK%2BurHUU1C73Pnw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: How do you structure Playbooks to Handle Managing Many Applications with Many Environments?

[Javier Palacios]

My opinion is that there should be only one inventory. To achieve this we
have an inventory with multiple axes, so that every host is member of a few
groups (typically for the running app and the environment). This still
requires "duplicated" playbooks, because the hosts must be explicit there,
but allows you to manage the "real" playbook in an separate file. With this
approach, the playbooks look like

- hosts: production:&database
  include: database.yml
---
- hosts: staging:&tomcat
  include: appserver.yml

The only other alternative I see is let the hosts to be defined with a
variable, either in the way commented by John which or with a similar
approach.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpURqDyn1UG2nkSHyJvNJD5dEYmQ8TFouL0kqSTCUo-Jx2g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Is there something like puppet librarian or R10K for Ansible?

[Javier Palacios]

Its maybe an issue with the expression I did use `where the inventory
lives` means under the same directory where is your inventory. So, it looks
for roles on /path/to/playbok/roles and then on /path/to/inventory/roles.

Javier Palacios

On Mon, Aug 31, 2015 at 11:24 PM, Greg DeKoenigsberg 
wrote:

> On Mon, Aug 31, 2015 at 4:23 PM, Jeffrey Lee  wrote:
> > How would you store roles with your inventory? Isn't the inventory file
> just
> > a grouping of hosts?
>
> Well, it's a grouping of hosts and variables. If I understand Javier's
> intent, I think he's suggesting that you use variables in inventory
> files to specify the role versions that you want to access.
>
> --g
>
> > -Jeff
> >
> > On Monday, August 31, 2015 at 11:27:16 AM UTC-4, Javier Palacios wrote:
> >>
> >>
> >> On Fri, Aug 28, 2015 at 10:01 PM, Jeffrey Lee 
> wrote:
> >>>
> >>> I'm looking for a way to manage different versions of Ansible roles
> that
> >>> I am writing when deploying applications. For instance if one
> application
> >>> needs v1 of an Ansible role I wrote and another application needs v2
> of an
> >>> Ansible role, is there a tool like puppet librarian or R10K that I can
> use
> >>> with Ansible that will assemble the entire Ansible package for me with
> the
> >>> correct versions of the roles?
> >>
> >>
> >> In case you didn't know roles are looked up wherever inventory lives
> _and_
> >> wherever the playbook lives (this one rules). So you can keep your
> standard
> >> roles along the inventory and the higher version ones along the
> playbooks
> >> where they are used. It might not suit your needs, and it will
> potentially
> >> end in as many directories as playbooks you have, but might help.
> >>
> >> Javier Palacios
> >
> > --
> > You received this message because you are subscribed to the Google Groups
> > "Ansible Project" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to ansible-project+unsubscr...@googlegroups.com.
> > To post to this group, send email to ansible-project@googlegroups.com.
> > To view this discussion on the web visit
> >
> https://groups.google.com/d/msgid/ansible-project/3ab83cd2-259f-4a04-bced-43c048fc58a2%40googlegroups.com
> .
> >
> > For more options, visit https://groups.google.com/d/optout.
>
>
>
> --
> Greg DeKoenigsberg
> Ansible Community Guy
>
> Find out why SD Times named Ansible
> their #1 Company to Watch in 2015:
> http://sdtimes.com/companies-watch-2015/
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/CAM1FbhF9y2yrgdtNAzycRyQT6V6NGcZ%2B%2B0%3DzyfLbpYyQq9si%3DA%40mail.gmail.com
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUTm8R%3DMbo%2BLcH02eKqzC%2BnK1TNu4KQqn7NUN_1NjqGABA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Issue with default value

[Javier Palacios]

Try with
 default("127.0.0.1", true)
It is not clear on the filter description, but without the second argument
it does not perform a boolean evaluation, but just strict variable
undefinition. That means that an empty string will not trigger the default.
Actually, even if the variable you are testing is None, the default will
not be used.

Javier Palacios

On Tue, Sep 1, 2015 at 1:55 PM, Paul Tötterman 
wrote:

> Sorry to resurrect this old thread.
>
>
>> ansible_eth1["ipv4"]["address"] | default("127.0.0.1")
>>
>
> I tried this and it didn't work. Is it supposed to? Is there some other
> way of using default that would work? Would it make sense to fix the
> default filter to work in this case?
>
> Cheers,
> Paul
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/b78f706e-30e1-4fc0-9a86-2b19924fa7bb%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/b78f706e-30e1-4fc0-9a86-2b19924fa7bb%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUTFoe%2B-cZ1-TUf065T5%2BBGg_rNN4d73jDFC-iWB8pKfyg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Is there something like puppet librarian or R10K for Ansible?

[Javier Palacios]

On Fri, Aug 28, 2015 at 10:01 PM, Jeffrey Lee  wrote:

> I'm looking for a way to manage different versions of Ansible roles that I
> am writing when deploying applications. For instance if one application
> needs v1 of an Ansible role I wrote and another application needs v2 of an
> Ansible role, is there a tool like puppet librarian or R10K that I can use
> with Ansible that will assemble the entire Ansible package for me with the
> correct versions of the roles?
>

In case you didn't know roles are looked up wherever inventory lives _and_
wherever the playbook lives (this one rules). So you can keep your standard
roles along the inventory and the higher version ones along the playbooks
where they are used. It might not suit your needs, and it will potentially
end in as many directories as playbooks you have, but might help.

Javier Palacios

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CANsNpUR_E-uZ40%3DyXa368%2B0Up3JckhBCag568nCmJn2dojXnkg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.