我正在嘗試找到一種方法將 Ansible 庫存檔案儲存在伺服器本地空間之外的位置(例如 Azure)。這是 Ansible Dynamic Inventory 可以實現的嗎?我已閱讀有關動態庫存的文檔,但對我來說,這有點令人困惑。可能是因為我缺乏知識。
簡而言之,我的問題是:有沒有辦法將 ansible 庫存檔案儲存在遠端位置,並要求 ansible 在運行劇本/角色時從那裡讀取它?如果是這樣,那是什麼?
答案1
是的,這只能透過動態庫存來完成。寫一個 python 腳本,例如:
#!/usr/bin/env python
import os
import sys
import argparse
import json
import requests
class MyInventory(object):
def __init__(self):
self.inventory = {}
self.read_cli_args()
# Called with `--list`.
if self.args.list:
self.inventory = self.my_inventory()
# Called with `--host [hostname]`.
elif self.args.host:
# Not implemented, since we return _meta info `--list`.
self.inventory = self.host_inventory(self.args.host)
# If no groups or vars are present, return an empty inventory.
else:
self.inventory = self.empty_inventory('no args')
print(json.dumps(self.inventory, indent=2, sort_keys=True))
def my_inventory(self):
try:
if "INVENTORY_ENDPOINT" in os.environ:
url = os.environ.get('INVENTORY_ENDPOINT')
else:
url = 'https://myserver/inventory'
if "INVENTORY_USERNAME" in os.environ:
username = os.environ.get('INVENTORY_USERNAME')
else:
return self.empty_inventory('environment-variable INVENTORY_USERNAME not set')
if "INVENTORY_PASSWORD" in os.environ:
password = os.environ.get('INVENTORY_PASSWORD')
else:
return self.empty_inventory('environment-variable INVENTORY_PASSWORD not set')
headers = {
'Accept': 'application/json',
'User-Agent': 'dynamic-inventory-script/v1.0',
'Connection': 'close'
}
result = requests.get(url, timeout=5, auth=(username,password), headers=headers)
result.encoding = 'utf-8'
return json.loads(result.text)
except:
return {}
# Host inventory for testing.
def host_inventory(self, hostname):
return {
'_meta': {
'hostvars': {}
}
}
# Empty inventory for testing.
def empty_inventory(self,message):
return {
'_meta': {
'hostvars': {
'mesage': message
}
}
}
# Read the command line args passed to the script.
def read_cli_args(self):
parser = argparse.ArgumentParser()
parser.add_argument('--list', action = 'store_true')
parser.add_argument('--host', action = 'store')
self.args = parser.parse_args()
# Get the inventory.
MyInventory()
硬編碼或系統環境變數的 URL 應指向 JSON 格式的清單。
請注意 - 動態清單始終採用 JSON 格式,並且具有與 INI 或 YAML 檔案不同的佈局。看https://docs.ansible.com/ansible/latest/dev_guide/developing_inventory.html#developing-inventory-scripts
你可以透過以下方式呼叫你的 ansible-playbook
ansible-playbook -i inventory.py ...
請注意 - 庫存腳本不能是 python 腳本。 bash 腳本也可以工作。只需要 JSON 輸出。
#!/bin/sh
if [ -z "$INVENTORY_USERNAME" ]; then
echo "{}"
exit 0
fi
if [ -z "$INVENTORY_ENDPOINT" ]; then
INVENTORY_ENDPOINT="https://myserver/inventory"
fi
curl -s GET "$INVENTORY_ENDPOINT" -H "accept: application/json" --user $INVENTORY_USERNAME:$INVENTORY_PASSWORD &> /dev/stdout
#eof