Re: [ansible-project] balanced configuration

2015-05-19 Thread Brent Langston
What you describe is similar to a setup I've used in the past. We broke up this part of our inventory into pools which was determined by a fact set for the host. You could have poolA poolB and poolC, and db1, db2 and db3 respectively. poolA would connect to db1, poolB to db2, and poolC to db3.

Re: [ansible-project] Remove a rule from AWS EC2 Security group using Ansible

2015-05-15 Thread Brent Langston
. Rahul Mehrotra Cloud DevOps Engineer, Nokia USA email: rahul.mehrotr...@gmail.com [image: View Rahul Mehrotra's profile on LinkedIn] http://www.linkedin.com/in/rahulmehrotra1 On Fri, May 15, 2015 at 11:00 AM, Brent Langston brent

Re: [ansible-project] Remove a rule from AWS EC2 Security group using Ansible

2015-05-15 Thread Brent Langston
remove the rule from the list. rules: [] Brent On Fri, May 15, 2015 at 1:32 PM, Rahul Mehrotra rhlmh...@gmail.com wrote: I have an Ansible script to create EC2 security group. It looks like this - name: Create HTTP Security Group local_action: module: ec2_group

Re: [ansible-project] Remove a rule from AWS EC2 Security group using Ansible

2015-05-15 Thread Brent Langston
: rahul.mehrotr...@gmail.com [image: View Rahul Mehrotra's profile on LinkedIn] http://www.linkedin.com/in/rahulmehrotra1 On Fri, May 15, 2015 at 10:49 AM, Brent Langston brent...@oufan.com wrote: remove the rule from the list. rules: [] Brent On Fri, May 15, 2015 at 1:32 PM

Re: [ansible-project] Is this possible with Ansible?

2015-02-09 Thread Brent Langston
short answer is yes... easily. An example of your template scenario might look something like this: {% if ansible_local.oscar.tags.environment == production %} server_name foo.example.com; {% elif ansible_local.oscar.tags.environment == staging %} server_name

Re: [ansible-project] Where do you run Ansible from for managing an EC2 cluster?

2015-01-01 Thread Brent Langston
is deployed. On Wednesday, December 31, 2014 10:26:40 PM UTC-5, Brent Langston wrote: And by goat, I mean host. :-) On Dec 31, 2014 10:25 PM, Brent Langston bren...@oufan.com wrote: We, at hioscar.com, run ansible local from the local goat for all config runs from cron, every 10 minutes

Re: [ansible-project] Where do you run Ansible from for managing an EC2 cluster?

2014-12-31 Thread Brent Langston
We, at hioscar.com, run ansible local from the local goat for all config runs from cron, every 10 minutes. Pros: It's fast It's automatic, so devs don't need direct access to our systems. Con: It isn't aware of the whole inventory, mainly due to our setup. This ends up complicating things when

Re: [ansible-project] Where do you run Ansible from for managing an EC2 cluster?

2014-12-31 Thread Brent Langston
And by goat, I mean host. :-) On Dec 31, 2014 10:25 PM, Brent Langston brent...@oufan.com wrote: We, at hioscar.com, run ansible local from the local goat for all config runs from cron, every 10 minutes. Pros: It's fast It's automatic, so devs don't need direct access to our systems. Con

Re: [ansible-project] ansible 1.6.2 - 1.8.1 huge increase in startup time

2014-12-03 Thread Brent Langston
can be needed -- but I'm curious if you could provide info about what much longer means? Such as before and after numbers, and numbers of hosts in your inventory? On Tue, Dec 2, 2014 at 2:43 PM, Brent Langston brent...@oufan.com wrote: Hi guys, I'm hoping I've just overlooked an option

Re: [ansible-project] issue setting tags on ec2 module

2014-07-24 Thread Brent Langston
On Tue, Jul 22, 2014 at 3:13 PM, Michael DeHaan mich...@ansible.com wrote: Also local_action is usually not needed in cloud provisioning tasks as you can just have a play that talks to localhost yeah, this was written before localhost was handled the way it is today. I haven't gone back and

Re: [ansible-project] issue setting tags on ec2 module

2014-07-22 Thread Brent Langston
This might be old'ish style at this point, but this is how I do it: - name: tag my launched instances local_action: ec2_tag resource={{ item.id }} region={{ region }} state=present with_items: ec2.instances args: tags: Name: {{assigned_hostname.stdout}}

Re: [ansible-project] ansible_ssh_private_key and IdentitiesOnly

2014-06-09 Thread Brent Langston
is leveragable here to pass additional arguments correct? Also this is configurable in ansible.cfg. On Sat, Jun 7, 2014 at 11:34 AM, Brent Langston brent...@brentley.net wrote: I see your logic, but I think this world break a use case I have in my environment where a bot layers

Re: [ansible-project] Re: Doing a diff between two device's facts

2014-06-06 Thread Brent Langston
On Thu, Jun 5, 2014 at 7:52 PM, Jason Edelman jedelm...@gmail.com wrote: Have an alternative solution working now. secrets don't make friends! mind closing the loop by sharing what you came up with? Brent -- You received this message because you are subscribed to the

Re: [ansible-project] Adding a security group to running ec2 instance

2014-06-04 Thread Brent Langston
Whoa. Maybe I'm misunderstanding you but I add and remove security groups on instances while running all the time. It would be cool to do that via ansible. On Jun 4, 2014 7:41 AM, Brian Coca brianc...@gmail.com wrote: aws doesn't allow you to change the security group association of a instance

Re: [ansible-project] Delegated cronjobs with time vars per target host

2014-04-03 Thread Brent Langston
I did this a while back, thinking I'd replace it with something more elegant when I have time... honestly, it's been working so well, I haven't thought about it again, until you reminded me. I have a script saved in my ansible git repo: $GIT/ansible/bin/cron_scheduler.sh #!/bin/bash

Re: [ansible-project] Ansible mysql module does not work with enterprise version mysql

2014-03-05 Thread Brent Langston
I world expect it to work perfectly. On Mar 5, 2014 12:48 PM, jack jackma1...@gmail.com wrote: thanks, anyone has experience with MySQL Enterprise Edition ( MySQL-server-advanced-5.6.16-1.el6.x86_64.rpm)? On Wednesday, March 5, 2014 9:32:41 AM UTC-8, Brent Langston wrote: I use

[ansible-project] can the mysql_user module include additional user requirements?

2014-02-24 Thread Brent Langston
I'd like to use the mysql_user module to create accounts that look like this: GRANT ALL PRIVILEGES ON *.* TO ‘bob’@'%’ IDENTIFIED BY ‘pass’ REQUIRE SSL; Looking at the docs, it's not immediately obvious how to do this. - mysql_user: name=bob host='%' password=pass priv=*.*:ALL

[ansible-project] accessing json data

2014-02-10 Thread Brent Langston
I'm sure this is probably something I'm doing wrong, but I can't seem to figure out the right thing, so hopefully someone else can. This is the value of the registered variable jenkinsStatus: http://hastebin.com/cacusiwiki.tex Given the following playbook: --- - name: Jenkins Status Info

Re: [ansible-project] accessing json data

2014-02-10 Thread Brent Langston
be on the right track. On Mon, Feb 10, 2014 at 2:28 PM, Brent Langston brent...@oufan.com wrote: So I downloaded the json to a file, and tried to access that value using ‘jq’: cat document.json | jq .json.changeSet.items[0].comment that works fine, so I think you’re right about the syntax

Re: [ansible-project] Handlers and failures

2014-02-08 Thread Brent Langston
What if you just abort the remaining tasks, and still run the handlers that have already been set on that run? Brent On Sat, Feb 8, 2014 at 7:34 PM, James Martin jmar...@basho.com wrote: I wonder if ansible's retry feature could be made smart enough to note the handlers

[ansible-project] Includes from a secured file - can we continue if the file is unreadable?

2014-01-25 Thread Brent Langston
So here's the story: My team is managing some of our secure settings using a set of variables stored in a file, and encrypted using git-crypt. This has been working great under the push model, because we all have the key, and have the secret yaml files decrypted. I've rolled out