Re: [ansible-project] Re: Are Roles enough?

2014-06-06 Thread Joost Cassee
qGkznqr-Ao/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > ansible-project+unsubscr...@googlegroups.com. > To post to this group, send email to ansible-project@googlegroups.com. > To view this discussion on the web visit > https://groups.

[ansible-project] Re: Are Roles enough?

2014-06-03 Thread Joost Cassee
Recently I have changed my Ansible set-up based on roles. I have a very similar dependency structure as yours: host1 -> profile1, profile2 host2 -> profile2, profile3 profile1 -> state1, state2 profile2 -> state2, state3 ... Both profiles and states are roles, but I separate them into two roles

Re: [ansible-project] Combine multiple inventory sources?

2014-05-28 Thread Joost Cassee
mentioned: > https://github.com/sergevanginderachter/ansible/tree/INTEGRATION > >> Is this a bug? > > Yes, and it will get solved :) Great, thank for reproducing! Do you have an idea of when those changes will land in devel? Regards, Joost -- Joost Cassee http://joost.cassee.net --

[ansible-project] Combine multiple inventory sources?

2014-05-28 Thread Joost Cassee
Hi all, [Sorry for the barrage of mails, I am restructuring my Ansible layout and running into several things at once.] I thought it was possible to combine inventory sources like this: hosts/static1 --- [group1] host1 hosts/static2 --- [group2] host1 test.yml --- - hosts: all connection: l

Re: [ansible-project] Using fetch in a role

2014-05-28 Thread Joost Cassee
you suggesting creating the /etc/ssh_host_* files on the Ansible host and pushing them out to the managed nodes? Would kind of make sense. Easy to do, too, with ssh-keygen. Regards, Joost -- Joost Cassee http://joost.cassee.net -- You received this message because you are subscribed to the Google

Re: [ansible-project] Using fetch in a role

2014-05-28 Thread Joost Cassee
m not proud of myself. :-) Regards, Joost 2014-05-28 12:43 GMT+02:00 Joost Cassee : > Hi all, > > I am using the fetch module in a role that redistributes ssh_known_hosts by: > 1) creating a snippet on every host > 2) fetching those snippets > 3) redistributing the concatenation &

[ansible-project] Using fetch in a role

2014-05-28 Thread Joost Cassee
Hi all, I am using the fetch module in a role that redistributes ssh_known_hosts by: 1) creating a snippet on every host 2) fetching those snippets 3) redistributing the concatenation I wanted to keep the snippets inside the files directory of the role, but the fetch module fetches does not use

Re: [ansible-project] Custom Jinja tests?

2014-05-26 Thread Joost Cassee
:32 PM, Michael DeHaan wrote: >> >> What you are describing is a Jinja2 filter. >> >> Read about filter plugins here and search the source tree for "core.py" >> for plenty of examples. >> >> http://docs.ansible.com/developing_plugins.htm

[ansible-project] Custom Jinja tests?

2014-05-25 Thread Joost Cassee
Hi, Custom template filters are a great way to take the programming out of my playbooks. Sometimes I would like to have a Jinja test, though. For example, I have a filter 'is_in_zone(domain, zone)' to see if a domain ends with a certain tail. For example, 'test.example.com' is in zone 'example

Re: [ansible-project] Strange behavior in group_by module with 'with_items'

2014-05-25 Thread Joost Cassee
in their own group. If you us a fact but not with_items it works. I have included an example in the issue. Regards, Joost -- Joost Cassee http://joost.cassee.net -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe fr

[ansible-project] Strange behavior in group_by module with 'with_items'

2014-05-23 Thread Joost Cassee
Hi, I have a couple of hosts that have a 'profiles' variable that contains a list of, well, profiles that I want to apply. I want to use group_by to turn those into groups. However, it is not working. (I am doing this on the current devel branch, by the way.) This test case isolates the issue:

Re: [ansible-project] Variable interpolation in task name

2014-05-10 Thread Joost Cassee
I was trying to get Ansible to print out the domains that are created without using the debug task, but I guess I will use debug after all. By the way, I did search the list for variation on "name variable interpolation" but did not find anything. Thanks for explaining yet again

[ansible-project] Variable interpolation in task name

2014-05-07 Thread Joost Cassee
Hi, I have a role that updates DNS records. It contains a number of tasks such as: - name: Create A record route53: command=create zone=example.com record={{ domain }} type=A value={{ ip }} Other roles (that represent server profiles) depend on this role like this: - role: dns domain: "{{

Re: [ansible-project] Oracle Java module

2014-05-01 Thread Joost Cassee
For what it's worth, I recently created a role for installing Sun Java on Ubuntu. It's not as generic as Lisa's module, but could maybe serve as a foundation for something better. See: https://letscrate.com/f/jcassee/ansible/java.zip Some notes: * Installs StartSSL certificates into the cacerts

Re: [ansible-project] Error validating launchpad.net SSL certificate?

2014-04-29 Thread Joost Cassee
we can keep track of it? > > Thanks! > > > On Tue, Apr 29, 2014 at 12:08 AM, Joost Cassee wrote: >> >> Hi James, >> >> Thanks for the ideas. As I mentioned, I am using the latest commit from >> devel, and have all the certificates. In fact, I showed that i

Re: [ansible-project] Error validating launchpad.net SSL certificate?

2014-04-28 Thread Joost Cassee
tes) > and that the /etc/ssl/certs/ directory is present and contains certificates. > > > On Mon, Apr 28, 2014 at 5:48 PM, Joost Cassee wrote: > >> Hi, >> >> I am using the latest commit from the devel branch, and I am having >> difficulty adding an Apt reposit

[ansible-project] Error validating launchpad.net SSL certificate?

2014-04-28 Thread Joost Cassee
Hi, I am using the latest commit from the devel branch, and I am having difficulty adding an Apt repository. The system I am running Ansible on is Ubuntu 12.04, the provisioned host is running 14.04. I am using this task: - apt_repository: repo='ppa:webupd8team/java' The error is: msg: Failed

Re: [ansible-project] Using a "-e force=yes" flag

2014-01-02 Thread Joost Cassee
ol filter when using the variable ("{{ x | bool }}")? Or would you expect this to work in vars/main.yml: x: "{{ y | bool} }" Regards, Joost -- Joost Cassee http://joost.cassee.net -- You received this message because you are subscribed to the Google Groups "Ansi

[ansible-project] Using a "-e force=yes" flag

2014-01-02 Thread Joost Cassee
Hi, First of all, a very happy new year to all of you. I am trying to find a way to make it possible to add "-e force=yes" to an ansible-playbook command line to force certain things, like unpacking an archive, even if it has not changed. I want to add "when: force" to such tasks. My set-up i

[ansible-project] Error while evaluating conditional with "and"

2013-12-30 Thread Joost Cassee
Hi, This is probably a very silly mistake on my part, but I cannot seem to get con-/disjunctions working in when statements. See this setup: hosts: --- localhost --- playbook.yml: --- --- - hosts: localhost gather_facts: no connection: local vars: - a: yes b: yes tasks: - action

Re: [ansible-project] Serial per group

2013-12-12 Thread Joost Cassee
ct+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/groups/opt_out. -- Joost Cassee http://joost.cassee.net -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop rec

[ansible-project] Serial per group

2013-12-11 Thread Joost Cassee
Hi, The serial option is a great way of upgrading servers behind a load balancer. One of the example playbooks has a HAProxy example that I used, and it works great. I set the serial option upto half of the hosts and the service continues running. I am excited about the new "serial: 50%" pull

[ansible-project] Re: using assemble to build iptables rules

2013-11-26 Thread Joost Cassee
Hi James, If you do not mind using a tool, ferm [1] configuration is very, very close to close to the iptables syntax and includes an @include statement that makes the assemble step unnecessary. Oh, and it has syntax for managing the ipv4/ipv6 duplication. [1] http://ferm.foo-projects.org/ Re