Re: [ansible-project] Enable Kerberos Authentication for WinRM and Powershell exection on Windows Hosts

2014-07-31 Thread Ian Clegg
You are right Michael, a change to ansible would only be required if we could not address the underlying issue in pywinrm. We will discuss on the PR Cheers! On Wednesday, 30 July 2014 20:55:58 UTC+1, Michael DeHaan wrote: > > Very timely! > > Folks, if you could comment on the ticket with any t

Re: [ansible-project] Structure for Ansible and handling of config

2014-07-31 Thread Daniel Schroeder
Thanks Michael, Tower allows you to upload a private key Well the key only was an example. One that I just made up because there might be the possibility one needs to change it. Another example would be the ssh *timeout* or more generally the *ssh_args*. Probably this all could be set in the

Re: [ansible-project] How to use hostvars in template

2014-07-31 Thread Piet83
When I use the following in my playbook: group_by: name=webservers-{{ city | default('no_city')}} I get this error when running: TASK: [group_by name=webservers-amsterdam] fatal: [ansible-test] => 'key' is a required argument. ansible-test is my targe

[ansible-project] using a variable as a key to a dictionary

2014-07-31 Thread Yves Dorfsman
With jinja2, is it possible to use a variable as a key to a dictionary? The following doesn't work: var file: db_names: - prod - dev - qa databases: prod: connection_string: prod_conn_string qa: connection_string: qa_conn_string dev: connection_string: dev_conn_string p

Re: [ansible-project] using a variable as a key to a dictionary

2014-07-31 Thread Yves Dorfsman
Got it (from http://jinja.pocoo.org/docs/templates, right in "Variables"): - name: test debug: msg="database conn string: {{ databases[item].connection_string }} with_items: db_names On 2014-07-31 10:41, Yves Dorfsman wrote: > > With jinja2, is it possible to use a variable as a key to a di

Re: [ansible-project] centos 6.5 issue

2014-07-31 Thread Dick Davies
CentOS 6.x doesnt support ControlPersist, so it will use paramiko. I installed CentOS 7 to use as my Ansible deploy VM just for this feature, speeds things up on our 30 node / 50 role stack significantly. On 28 July 2014 15:14, Michael DeHaan wrote: > Since you are using CentOS as a control mach

Re: [ansible-project] `ansible_ssh_user` overriding `remote_user`

2014-07-31 Thread Serge van Ginderachter
On 31 July 2014 00:29, Michael DeHaan wrote: > OTOH, I see the reasoning of making the play stuff "beat" inventory when > set as such. ​I would have expected​ that, too, though never used this combo. Not sure why it's not like this? Brian, are you aware of a reason? BTW, while I could accept

Re: [ansible-project] How to use hostvars in template

2014-07-31 Thread Lucas, Sascha
Hi, > fatal: [ansible-test] => 'key' is a required argument. group_by needs key=webservers-{{ city | default('no_city')}}, not name=... HTH, Sascha. Stellvertretender Vorsitzender des Aufsichtsrates: Detlef Hillebrand Geschäftsführung: Michael Krüger Sitz der Gesellschaft: Halle/Saale Registerg

Re: [ansible-project] `ansible_ssh_user` overriding `remote_user`

2014-07-31 Thread Brian Coca
it makes sense that the inventory variables override others, the specifics of a host should override the generalities of the plays.​ If a play has remote_user = user1, but some hosts have different users, you would not be able to use them otherwise, with inventory overriding, this is possible. --

Re: [ansible-project] `ansible_ssh_user` overriding `remote_user`

2014-07-31 Thread Michael DeHaan
It's a "can't win em all" thing. In one case, you want a way to override all behavior, in another, you want a way to set a default. In most cases, if you make a host with a given username/pass coupled to it, it means "I really really want to use this" but you could still use other host aliases if

Re: [ansible-project] centos 6.5 issue

2014-07-31 Thread Michael DeHaan
Excellent, accelerated mode would have also been a good answer for 6.5 - though I definitely prefer the native SSH transport when possible. Switch on pipelining if you haven't already, it should approximately double in speed again (search for pipelining in ansible.cfg) On Thu, Jul 31, 2014

Re: [ansible-project] centos 6.5 issue

2014-07-31 Thread Nigel Metheringham
Michael DeHaan wrote: Excellent, accelerated mode would have also been a good answer for 6.5 - though I definitely prefer the native SSH transport when possible. My Centos 6 control machine has an updated ssh client, built from the Fedora ssh rpm (the server side has been left as is). Howe

Re: [ansible-project] `ansible_ssh_user` overriding `remote_user`

2014-07-31 Thread Brian Coca
you can still override it at run/play level, it is just not with remote_user, you need to set/unset ansible_ssh_user​ -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an em

[ansible-project] Re: Windows Support Stage 2: Engage Battlestations!

2014-07-31 Thread Steffen Prince
I see there being three very different user groups for this: - *nix admins who for whatever reason have some services in their herd that are tied to Windows - Windows Server/IIS admins - Corporate desktop admins I think the first group would be pleased with little more than the basic file and

Re: [ansible-project] Re: ec2 module, "state: running" doesn't return the public_dns_name, ip etc...

2014-07-31 Thread Michael DeHaan
Yep, this is merged in now, thank you! On Wed, Jul 30, 2014 at 9:20 AM, Damjan Georgievski wrote: > pull request sent > https://github.com/ansible/ansible/pull/8353 > > > On Wednesday, July 30, 2014 2:16:16 PM UTC+2, Damjan Georgievski wrote: >> >> I have this simple task: >> >> - name: Sta

Re: [ansible-project] How do I recursively set directory/file permissions

2014-07-31 Thread Michael DeHaan
So the idea of backing it by chmod with -c sounds great but we'd need an option for when it was non-GNU, really it would need to autodetect and use the legacy path. Generally I don't like including alternate code paths, but this would mainly be for recursive=yes and in that case we could have a ca

[ansible-project] Re: Windows Support Stage 2: Engage Battlestations!

2014-07-31 Thread Damon Overboe
I wonder if the automation group is going to stay as spinning up VMs from manually configured starting points? I'm coming from the development side; I've traditionally been in the .net stack but as there is so much bleed-over between the different disciplines now, I feel like we're finally star

[ansible-project] Re: Windows Support Stage 2: Engage Battlestations!

2014-07-31 Thread Damon Overboe
And the point that I try to make is I would rather be able to take a clean VM with the absolute bare minimums and use that as a starting point, rather than configuring a base VM image and then just pushing updates to it. I may not have a lot of people on the Windows side that agree with that r

Re: [ansible-project] Some changes in backup mechanism

2014-07-31 Thread Mike Ray
What is the status of this? My team would find a feature like this immensely helpful. It would be additionally useful if you could force it to only maintain X backups in said backup directory. I see nothing in the changelogs about this. On Saturday, October 12, 2013 12:44:52 PM UTC-5, Vadim S

Re: [ansible-project] Some changes in backup mechanism

2014-07-31 Thread Michael DeHaan
Remote backups? Honestly haven't had time to attack. I'll bump the priority though so it doesn't get lost in the shuffle -- it's a good idea -- and an OLD idea :) On Thu, Jul 31, 2014 at 4:09 PM, Mike Ray wrote: > What is the status of this? My team would find a feature like this > immense

[ansible-project] Why So Slow?

2014-07-31 Thread Tiglath
Trying Ansible for app deployment. It's nice but why so slow? This below involves copying four files and it takes minutes !!!I am running on Solaris 11. - name: Populate conf directory copy: src="{{ item }}" dest=/tcpcore/conf with_fileglob: /commutil/con

Re: [ansible-project] Why So Slow?

2014-07-31 Thread Michael DeHaan
That's pretty crazy and not typical. Please supply your ansible version, what OS you are running from, and what connection type we are using. Also have you tried accelerated mode, ControlPersist or pipelining yet? I assume these are smallish files and that shouldn't matter. It will just be doin

[ansible-project] Ansible JSON module?

2014-07-31 Thread Synaesthete
Is there a module for manipulating JSON data? Say I have a settings file that's written in JSON, and I'd like to set or modify a value. As a task, this might look like: - name: Modify author name json: src=config.json key=author.name value='rvang' -- You received this message because you a

Re: [ansible-project] Some changes in backup mechanism

2014-07-31 Thread Mike Ray
Yes I did see that it was several months ago... hooray for necro-posting. But no, I was not suggesting remote backups. Simply put, it would be nice if I could: 1) tell ansible what directory to backup files to ( our playbooks run as root so permissions aren't a concern for me ) 2) tell ansible how

[ansible-project] FreeBSD sysctl fixes

2014-07-31 Thread Berend de Boer
Hi ansible, Any more comments on my FreeBSD sysctl fixes? https://github.com/ansible/ansible/pull/8256 You're probably very busy, so don't want to push anyone around here, but in case it had inadvertently dropped off the radar, just a gentle reminder. Would be very nice to have this in the nex

Re: [ansible-project] Re: Can lineinfile insert text into a line?

2014-07-31 Thread Michael DeHaan
No, you don't want this. The error handling in aug is atrocious, as is writing lenses for it. Never going to happen in ansible :) lineinfile was designed to make it easier, and it's also why we have things like the INI module. On Wed, Jul 30, 2014 at 10:39 AM, Paul Tötterman wrote: > Right no

Re: [ansible-project] Ansible UFW module: inaccurate documentation?

2014-07-31 Thread Michael DeHaan
With regards to the variable question: with_items: - { ip: "10.0.0.0/8", port: "any" } - { ip: "172.16.0.0/12", port: "any" } - { ip: "192.168.0.0/16", port: "any" } - { ip: "{{ bellevue_office_ip }}", port: "any" } Can you include the full output from the part about the protoco

Re: [ansible-project] Problems setting up WinRM

2014-07-31 Thread Michael DeHaan
I've just updated the docs to reference Trond's helpful setup script: https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1 Feedback and tweaks, if needed, would be very welcome as I like the idea of automating this as much as possible. On Wed, Jul 30,

Re: [ansible-project] Re: Windows Support Stage 2: Engage Battlestations!

2014-07-31 Thread Michael DeHaan
I've recently updated the windows intro docs to reference Trond's helpful setup script, see here: https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1 On Thu, Jul 31, 2014 at 3:42 PM, Damon Overboe wrote: > And the point that I try to make is I would

Re: [ansible-project] Problems setting up WinRM

2014-07-31 Thread Aaron Rogers
After spending much of the past day troubleshooting this on my Windows clients I decided to try setting up ansible on an Ubuntu box. Everything worked right the first time. In my corporate environment I need to use RHEL 6.4 so I blew away my host and will try the install again. Sorry for being

Re: [ansible-project] Structure for Ansible and handling of config

2014-07-31 Thread Michael DeHaan
On Thu, Jul 31, 2014 at 4:39 AM, Daniel Schroeder wrote: > Thanks Michael, > > Tower allows you to upload a private key > > > Well the key only was an example. One that I just made up because there > might be the possibility one needs to change it. Another example would be > the ssh *timeout* or

Re: [ansible-project] How to use hostvars in template

2014-07-31 Thread Michael DeHaan
Yep, typo on my part. I can't keep 100% of this program in my head but only 97.2% :) 2014-07-31 7:21 GMT-04:00 Lucas, Sascha : > Hi, > > > fatal: [ansible-test] => 'key' is a required argument. > > group_by needs key=webservers-{{ city | default('no_city')}}, not name=... > > HTH, Sascha. > >

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Michael DeHaan
Nothing in core presently. I'd probably be open to it. Can't remember what my comments were WRT this in the past. Probably needs to be pseudo-XPATHey in nature. On Thu, Jul 31, 2014 at 4:33 PM, Synaesthete wrote: > Is there a module for manipulating JSON data? Say I have a settings file >

Re: [ansible-project] Some changes in backup mechanism

2014-07-31 Thread Michael DeHaan
Yeah I've had this idea for a year and a half it seems. I'm proposing we do keep the backups on the ansible control machine in a configurable location with a number-to-keep. When I mean remote, I pretty much mean the control machine vs a delegated host, but that could obviously be a NFS mount.

Re: [ansible-project] FreeBSD sysctl fixes

2014-07-31 Thread Michael DeHaan
Discussion on pull requests is a better subject for ansible-devel usually. All being said, I followed up with a question 3 days ago and it got flagged P3, and there are 160 of those in queue right now. I had first requested some whitespace commits not go in, and this was fixed by a revert - which

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Brian Coca
its s easy to write json with jinja templates.​ -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to t

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Michael DeHaan
I'm assuming this was a request to replace some keys inside of them. In most cases yes, if you have a datastructure defined in Ansible - and ansible can read almost any data file as JSON instead of YAML too - not that this matters, {{ datastructure }} is all the template needs to be. I was assu

[ansible-project] Re: How to skip optional arguments to a module after new security patch?

2014-07-31 Thread Miks Kalniņš
I have similar problem and can't really use the workaround. - name: Create PostgreSQL users sudo: yes sudo_user: postgres postgresql_user: > name={{ item.name }} {% if item.password is defined %} password={{item.password}}{% endif %} {% if item.db is defined %} db={{item.db}}{% e

[ansible-project] Invalid OpenStack Identity credentials.

2014-07-31 Thread shailendra acharya
hello friends i m shailendra i need ur help in installation of openstack. i m trying icehouse manual but i got stuck here when it comes to create user using keystone user-create --name=admin --pass=shail123 --email=exam...@gmail.com it shows error Invalid OpenStack Identity credentials. now

[ansible-project] Make it possible to nest connection plugins

2014-07-31 Thread Filias Heidt
Hi all, I'm getting my feet wet in ansible and I'm pretty exited so far. But I think I discovered a use case, which might be of interest for others: We have numerous hosts with jails on them and would like to manage the jails with ansible - and not all jails are accessible via SSH, but all ho

[ansible-project] Not loading host_vars

2014-07-31 Thread Jason Sarrells
I cannot get anything in host_vars to load when running a playbook. I am using Ansible 1.4.3. What am I doing wrong? ~/test.yml --- -hosts: test tasks: - name: debug debug: var={{ foo }} /etc/ansible/hosts [test] 10.1.0.241 /etc/ansible/host_vars/test --- foo: bar or ~/ho

[ansible-project] Handlers are called for all hosts (not only for the changed hosts)

2014-07-31 Thread Oliver Laumann
Hello list, I'm trying to roll out some mysql configuration files. The playbook itself is not the problem. My problem are the handlers that are for every given host and not only for the changed hosts. I've got three servers that got some roles. The roles will be determinated by some "local gat

[ansible-project] Re: Aggregating role facts

2014-07-31 Thread Ned McClain
Stephen, I also desperately need a set_facts that works with with_items. Have you had any response to these excellent use-case examples? Ned. On Monday, November 11, 2013 11:14:41 AM UTC-7, Stephen Gargan wrote: > > Michael, > > I've put together an implementation for an add_facts command a co

Re: [ansible-project] Re: How to skip optional arguments to a module after new security patch?

2014-07-31 Thread Michael DeHaan
This has been discussed a few times in prior threads. Ultimately the proposal was that we would consider making certain flags automatically removable using something like a token value of {{ omit }} and the system could prune those values that used this magic variable. priv={% if x %}{{y}}{% else

Re: [ansible-project] Invalid OpenStack Identity credentials.

2014-07-31 Thread Michael DeHaan
Please ask this question on the OpenStack mailing list. This does not appear to be related to ansible. If you set it up with Ansible, first consider checking your authentication with Horizon. If you think you have an error with the ansible modules for OpenStack, that would be in scope for this l

Re: [ansible-project] Re: Aggregating role facts

2014-07-31 Thread Michael DeHaan
So that's a very old thread you've replied to, can you paste an example of what you are wishing to do? On Wed, Jul 30, 2014 at 8:51 PM, Ned McClain wrote: > Stephen, > > I also desperately need a set_facts that works with with_items. Have you > had any response to these excellent use-case ex

Re: [ansible-project] Not loading host_vars

2014-07-31 Thread Michael DeHaan
Well, you're using a terribly ancient version of Ansible, unrelated to your question. Upgrade to 1.6.10 first, you're missing some security fixes and numerous other upgrades. What you have in the first "host_vars" should be fine, however. On Thu, Jul 31, 2014 at 12:21 PM, Jason Sarrells wrot

Re: [ansible-project] Make it possible to nest connection plugins

2014-07-31 Thread Michael DeHaan
It's not going to be possible to nest them. What I think you are asking for is some way to do "remote jail management" which is going to be, unfortunately, probably a new connection plugin that might not be easy. I hate to say it, but this is why cloud VMs and things like bridged networking are s

Re: [ansible-project] Handlers are called for all hosts (not only for the changed hosts)

2014-07-31 Thread Michael DeHaan
Please try things in 1.6.10, which is the latest version, and contains security updates that you will want. Per the changelog, this was fixed in 1.6.3 https://github.com/ansible/ansible/blob/devel/CHANGELOG.md On Thu, Jul 31, 2014 at 4:37 AM, Oliver Laumann wrote: > Hello list, > > I'm trying

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Synaesthete
I tend to take the template route almost all the time. This is in regard to modifying JSON-based configuration files. I compose several roles and run them against a host. Each role might do something very distinct, while they all modify a common configuration file or add information to a meta-da

Re: [ansible-project] Re: Aggregating role facts

2014-07-31 Thread Ned McClain
Definitely - I desire to have different roles append firewall rules (strings) to a single fact dictionary. The final role will apply those generic rules to the appropriate iptables/ufw/ec2 security group based on the host's OS and cloud provider. Allowing each role to append their own rules t

Re: [ansible-project] Re: Aggregating role facts

2014-07-31 Thread Stephen Gargan
Ned, There are better patterns for sharing data that what I'd originally suggested. As your system grows this approach gets untenable. If you need to share data variable files are a far more flexible solution. As Michael says, if you post another thread explaining of what you're trying to we'll g

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Synaesthete
So are there any examples of a playbook or role that loads some JSON data from a file, works with that data, then writes it back out using a simple template like {{ data_structure }} ? What set of tasks could perform this? On Thursday, July 31, 2014 6:52:31 PM UTC-4, Synaesthete wrote: > > I te

[ansible-project] Merging dictionaries for "environment" parameter

2014-07-31 Thread Steven Ringo
Hi, I am wanting to use the environment task parameter with dictionaries taken from two roles, e.g. in roles/ruby/vars/main.yml: ruby_environment: GEM_HOME: "/home/deploy/.gem/ruby/2.1.2" PATH: "/home/deploy/.gem/ruby/2.1.2/bin:/opt/rubies/ruby-2.1.2/lib/ruby/gems/2.1.0/bin:/opt/

[ansible-project] Re: Storing private ssh keys in variables

2014-07-31 Thread Stephen Gargan
I do something similar to this to store sensitive files in vault. I base64 encode the data and set the variable with the resulting encoded string. Then in my template I use the b64decode filter when applying the variable. in your vault file private_key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1J

[ansible-project] Re: Merging dictionaries for "environment" parameter

2014-07-31 Thread Steven Ringo
To add: would prefer not to use hash_behaviour = merge if possible. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.

Re: [ansible-project] Re: Aggregating role facts

2014-07-31 Thread Michael DeHaan
I'm open to making set_fact work with with_items (pull request welcome). not having tested it recently - I'm actually surprised it didn't :) On Thu, Jul 31, 2014 at 7:02 PM, Stephen Gargan wrote: > Ned, > > There are better patterns for sharing data that what I'd originally > suggested. As yo

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Michael DeHaan
Not really. set_fact mostly allows replacing variables but doesn't have a good facility for what you speak of. What you speak of might be dealt with with something like action_plugin theoretically like "set_hash_entry" that took a hash, a key, and value, maybe. It gets a little programmy that way

Re: [ansible-project] Re: Merging dictionaries for "environment" parameter

2014-07-31 Thread Michael DeHaan
I think this might be proposing something like a jinja2 filter that merges one hash with another and returns it. I'm not aware of this, but some other folks go deeper than me. I'm not opposed to a filter plugin function being added that does this being added if that makes sense. On Thu, Jul 3

Re: [ansible-project] Re: Merging dictionaries for "environment" parameter

2014-07-31 Thread Steven Ringo
I thought it might be possible to loop over each hash respectively and then create a new one with all of those. On Friday, 1 August 2014 09:56:39 UTC+10, Michael DeHaan wrote: > > I think this might be proposing something like a jinja2 filter that merges > one hash with another and returns it.

Re: [ansible-project] Re: Merging dictionaries for "environment" parameter

2014-07-31 Thread Michael DeHaan
That in particular, I'd think no. What I'd really like might look something like environment: "{{ dict1 | update(dict2) }}" Anybody done anything like that with stock Jinja2-voodoo magic? If not, it's about a two liner in filter_plugins/core.py to expose the native hash update function. On T

Re: [ansible-project] Re: Windows Support Stage 2: Engage Battlestations!

2014-07-31 Thread Ash Caire
Totally agree with you in regards to there being three groups - My background is a *nix admin and in the middle of trying to convince two separate teams that fall into the second category, that they need to start using Ansible to manage their Windows infrastructure going forward. Thankfully Tower

Re: [ansible-project] Ansible JSON module?

2014-07-31 Thread Synaesthete
I see. Maybe I'll try my hand at writing a module. I'll drop a link to a github repo when that happens. On Thursday, July 31, 2014 7:55:20 PM UTC-4, Michael DeHaan wrote: > > Not really. > > set_fact mostly allows replacing variables but doesn't have a good > facility for what you speak of. > >

[ansible-project] Ansible 1.7 officially released?

2014-07-31 Thread celine
Hi, I wish to ask if Ansible 1.7 has been officially released? I was searching for ansible 1.7 tarball from here: http://releases.ansible.com/ansible/ but it is not there. Any idea when tarball for Ansible 1.7 will be out? Thank you. -- You received this message because you are subscribed

Re: [ansible-project] Ansible 1.7 officially released?

2014-07-31 Thread Ehtesh Choudhury
Is there a particular reason you want ansible 1.7 -- some slated features? the current latest version of ansible is 1.6.10, I believe: https://pypi.python.org/pypi/ansible On Thu, Jul 31, 2014 at 11:04 PM, wrote: > Hi, > > I wish to ask if Ansible 1.7 has been officially released? I was searchi

Re: [ansible-project] Ansible 1.7 officially released?

2014-07-31 Thread celine
Hi Ehtesh, I wish to have ansible 1.7 for its windows support features. On Friday, August 1, 2014 12:08:09 PM UTC+8, Ehtesh Choudhury wrote: > Is there a particular reason you want ansible 1.7 -- some slated > features? the current latest version of ansible is 1.6.10, I believe: > https://pyp

[ansible-project] Read vault password using gpg-agent

2014-07-31 Thread Dale
Hi Ansible users, I've been trying to use vault lately but I got tired of having to enter my passphrase every time I ran ansible-playbook. I didn't want to put my passphrase into a file on disk, either. Luckily, the next major release of Ansible will include the ability for vault_password_file t