hw№8 Ansible-1

README.md

@@ -46,3 +46,29 @@ external_ip_address_db = "51.250.89.190"
 создал инфраструктуру для окружений stage и prod
 проверил оба окружения
 добавил описание backend для stage и prod
+
+HW_8. Ansible-1
+создал окружение и установил ansible с помощью pip
+поднял инфраструктуру контура stage
+external_ip_address_app = "158.160.55.243"
+external_ip_address_db = "62.84.127.171"
+создал inventory, проверил ддоступность хостов для ansible
+проверил рабооту инвентори в разных вариациях, создал inventory.yml
+проверил inventory.yml, проверил модули command, shell, service, git
+Создан и протестирован плейбук clone.yml
+успешный пинг ansible all -m ping -i inventory
+проверка динамического инвентори: ansible all -m ping -i inventory.sh
+158.160.55.243 | SUCCESS => {
+    "ansible_facts": {
+        "discovered_interpreter_python": "/usr/bin/python3"
+    },
+    "changed": false,
+    "ping": "pong"
+}
+62.84.127.171 | SUCCESS => {
+    "ansible_facts": {
+        "discovered_interpreter_python": "/usr/bin/python3"
+    },
+    "changed": false,
+    "ping": "pong"
+}

ansible/.gitignore

@@ -0,0 +1,7 @@
+v_ansible/
+v1_ansible/
+*.old
+../terraform/
+./terraform/
+terraform/
+*.tf

ansible/ansible.cfg

@@ -0,0 +1,6 @@
+[defaults]
+inventory = ./inventory.json
+remote_user = ubuntu
+private_key_file = ~/.ssh/ubuntu
+host_key_checking = False
+retry_files_enabled = False

ansible/clone.yml

@@ -0,0 +1,7 @@
+- name: Clone
+  hosts: app
+  tasks:
+   - name: Clone repo
+     git:
+      repo: https://github.com/express42/reddit.git
+      dest: /home/ubuntu/reddit

ansible/inventory

@@ -0,0 +1,5 @@
+[app]
+appserver ansible_host=158.160.55.243
+
+[db]
+dbserver ansible_host=62.84.127.171

ansible/inventory.json

@@ -0,0 +1,12 @@
+{
+    "app": {
+        "hosts": {
+            "158.160.55.243": null
+        }
+    },
+    "db": {
+        "hosts": {
+            "62.84.127.171": null
+        }
+    }
+}

ansible/inventory.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+#yc compute instances list | tail -n +4 | head -n -2 | awk -F '|' '{print "["$3"]\n" $3 "-server" "%ansible_host="$6}' | tr -d '[:blank:]' | sed 's/%/ /g'  | sed 's/reddit-//g' > inventory
+#ansible-inventory -i inventory --list > inventory.json
+
+ if [[ $1 == "--list" ]]; then
+
+app=158.160.55.243
+db=62.84.127.171
+
+    cat <<EOT
+{
+    "_meta": {
+        "hostvars": {}
+    },
+    "app": {
+        "hosts": ["${app}"]
+    },
+    "db": {
+        "hosts": ["${db}"]
+    }
+}
+EOT
+
+elif [[ $1 == "--host" ]]; then
+    echo '{"_meta": {"hostvars": {}}}' | jq -M
+else
+    echo '{}'
+fi

ansible/inventory.yml

@@ -0,0 +1,16 @@
+app:
+  hosts:
+    appserver:
+      ansible_host: 158.160.55.243
+  vars:
+      ansible_user: "ubuntu"
+      ansible_ssh_private_key_file: "~/.ssh/ubuntu"
+      ansible_ssh_common_args: "-o StrictHostKeyChecking=no"
+db:
+  hosts:
+    dbserver:
+      ansible_host: 62.84.127.171
+  vars:
+      ansible_user: "ubuntu"
+      ansible_ssh_private_key_file: "~/.ssh/ubuntu"
+      ansible_ssh_common_args: "-o StrictHostKeyChecking=no"

ansible/requirements.txt

@@ -1 +1,2 @@
-ansible>=2.4
+ansible==2.10.7
+#python=3.5.2

terraform/modules/app/main.tf

@@ -10,8 +10,9 @@ resource "yandex_compute_instance" "app" {
     tags   = "reddit-app"
   }
   resources {
-    cores  = 2
-    memory = 2
+    core_fraction = 20
+    cores         = 2
+    memory        = 2
   }
   boot_disk {
     initialize_params {

terraform/modules/db/main.tf

@@ -12,8 +12,9 @@ resource "yandex_compute_instance" "db" {
   }
 
   resources {
-    cores  = 2
-    memory = 2
+    core_fraction = 20
+    cores         = 2
+    memory        = 2
   }
 
   boot_disk {

terraform/prod/main.tf

@@ -12,6 +12,9 @@ terraform {
 
 provider "yandex" {
   service_account_key_file = var.service_account_key_file
+  token                    = var.yc_token
+  access_key   = var.access_key
+  secret_key   = var.secret_key
   cloud_id     = var.cloud_id
   folder_id    = var.folder_id
   zone         = var.zone

terraform/prod/terraform.tfvars.example

@@ -1,3 +1,4 @@
+yc_token     = "y0_AgAAAABnLd1xAATuwQAAAADx1Dxxxxxxxxxxxxxxxxx"
 cloud_id                 = "b1gulp4hfrunfqk3lttb"
 folder_id                = "b1gsnn20hr06bqfra90t"
 zone                     = "ru-central1-a"
@@ -9,3 +10,5 @@ subnet_id                = "e9b4tphlh2sjr6g0j2cq"
 app_disk_image           = "fd8atnk3t60s5fmiaqil"
 db_disk_image            = "fd8u6gsncuov2n36bcrt"
 environment_space        = "prod"
+access_key               = "YCAJEHdVd2Qxxxxxxxxxxxxx"
+secret_key               = "YCNOs05Dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

terraform/prod/variables.tf

@@ -42,3 +42,7 @@ variable "access_key" {
 variable secret_key {
   description = "secret for s3 bucket"
 }
+variable yc_token {
+  type        = string
+    description = "yc_token"
+}

terraform/stage/main.tf

@@ -12,6 +12,7 @@ terraform {
 
 provider "yandex" {
   service_account_key_file = var.service_account_key_file
+  token                    = var.yc_token
   access_key   = var.access_key
   secret_key   = var.secret_key
   cloud_id     = var.cloud_id

terraform/stage/terraform.tfvars.example

@@ -1,3 +1,4 @@
+yc_token     = "y0_AgAAAABnLd1xAATuwQAAAADx1Dxxxxxxxxxxxxxxxxx"
 cloud_id                 = "b1gulp4hfrunfqk3lttb"
 folder_id                = "b1gsnn20hr06bqfra90t"
 zone                     = "ru-central1-a"
@@ -9,3 +10,5 @@ subnet_id                = "e9b4tphlh2sjr6g0j2cq"
 app_disk_image           = "fd8atnk3t60s5fmiaqil"
 db_disk_image            = "fd8u6gsncuov2n36bcrt"
 environment_space        = "stage"
+access_key               = "YCAJEHdVd2Qxxxxxxxxxxxxx"
+secret_key               = "YCNOs05Dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

terraform/stage/variables.tf

@@ -42,3 +42,7 @@ variable "access_key" {
 variable secret_key {
   description = "secret for s3 bucket"
 }
+variable yc_token {
+  type        = string
+    description = "yc_token"
+}