通过ansible获取文件的几种方式

通过ansible获取文件的几种方式:

通过lookup读取ansible管理节点上的的内容，并将其内容赋值给变量。如: 获取管理节点上的ssh key:

- name: Autoops | set ssh key
  set_fact:
    autoops_public_key: "{{ autoops_public_key | default(lookup('file', '/root/.ssh/id_rsa.pub')) }}"
    autoops_private_key: "{{ autoops_private_key | default(lookup('file', '/root/.ssh/id_rsa')) }}"
  delegate_to: localhost
  connection: local
  run_once: yes

- name: Autoops | set ssh key

set_fact:

autoops_public_key: "{{ autoops_public_key | default(lookup('file', '/root/.ssh/id_rsa.pub')) }}"

autoops_private_key: "{{ autoops_private_key | default(lookup('file', '/root/.ssh/id_rsa')) }}"

delegate_to: localhost

connection: local

run_once: yes

fetch 模块的作用就是”Fetches a file from remote nodes，fetch为”拿来”之意，当我们需要将受管主机中的文件拉取到ansible主机时，则可以使用此模块, 可以从远端将文件拉取到本地, 如获取k8s master节点上的ca证书到本地:

- hosts: kube_control_plane:localhost
  gather_facts: False
  pre_tasks:
  - setup:
      gather_subset: 'min'
    tags: 
      - kubeconfig_localhost
      - user_init
  tasks:
  - import_role: 
      name: kubespray-defaults
  - name: "set_fact for current_user"
    set_fact:
      current_user: "{{ hostvars[inventory_hostname]['ansible_env'].USER }}"
      current_user_home: "{{ hostvars[inventory_hostname]['ansible_env'].HOME }}"
    tags: 
      - kubeconfig_localhost
      - user_init

  - block:
    # edit admin.conf
    - name: modify admin.conf to api server domain
      lineinfile:
        dest: "{{ current_user_home }}/.kube/config"
        state: present
        regexp: '(^\s*.server: .*://).*(:.*$)'
        line: '\1{{ apiserver_loadbalancer_domain_name }}\2'
        backrefs: yes
      when: loadbalancer_apiserver is not defined
    delegate_to: localhost
    connection: local
    delegate_facts: yes
    become: no
    run_once: yes
    when:
      - kubeconfig_localhost
    tags: kubeconfig_localhost

  - name: Fetch ca.crt from master to ansible host
    fetch:
      src: "{{ kube_cert_compat_dir }}/ca.crt"
      dest: "{{ kube_cert_compat_dir }}/ca.crt"
      flat: yes
      validate_checksum: no
    register: copy_ca_result
    until: copy_ca_result is not failed
    retries: 20
    become: no
    run_once: yes
    when:
      - kubeconfig_localhost
      - "'HOSTNAME' in hostvars['localhost']['ansible_env']"
      - "hostvars['localhost']['ansible_env'].get('HOSTNAME') not in groups['kube_control_plane']"
    tags: kubeconfig_localhost

- hosts: kube_control_plane:localhost

gather_facts: False

pre_tasks:

- setup:

gather_subset: 'min'

tags:

- kubeconfig_localhost

- user_init

tasks:

- import_role:

name: kubespray-defaults

- name: "set_fact for current_user"

set_fact:

current_user: "{{ hostvars[inventory_hostname]['ansible_env'].USER }}"

current_user_home: "{{ hostvars[inventory_hostname]['ansible_env'].HOME }}"

tags:

- kubeconfig_localhost

- user_init

- block:

# edit admin.conf

- name: modify admin.conf to api server domain

lineinfile:

dest: "{{ current_user_home }}/.kube/config"

state: present

regexp: '(^\s*.server: .*://).*(:.*$)'

line: '\1{{ apiserver_loadbalancer_domain_name }}\2'

backrefs: yes

when: loadbalancer_apiserver is not defined

delegate_to: localhost

connection: local

delegate_facts: yes

become: no

run_once: yes

when:

- kubeconfig_localhost

tags: kubeconfig_localhost

- name: Fetch ca.crt from master to ansible host

fetch:

src: "{{ kube_cert_compat_dir }}/ca.crt"

dest: "{{ kube_cert_compat_dir }}/ca.crt"

flat: yes

validate_checksum: no

until: copy_ca_result is not failed

retries: 20

become: no

run_once: yes

when:

- kubeconfig_localhost

- "'HOSTNAME' in hostvars['localhost']['ansible_env']"

- "hostvars['localhost']['ansible_env'].get('HOSTNAME') not in groups['kube_control_plane']"

tags: kubeconfig_localhost

使用cat测试到变量
slurp 模块用于拉取远端文件的 base64 码, 可通过b64decode进行解码

任务: 获取etcd主机的ssl文件信息注册到变量, 用来生成etcdkeeper配置文件, 首先用cat来获取:

tasks/main.yml:

- block:
  - name: get remote file contents
    command: "cat {{ etcdkeeper_cacert_file }}"
    register: etcdkeeper_cacert_file

  - name: get remote file contents
    command: "cat {{ etcdkeeper_cert_file }}"
    register: etcdkeeper_cert_file

  - name: get remote file contents
    command: "cat {{ etcdkeeper_key_file }}"
    register: etcdkeeper_key_file
  when:
    - inventory_hostname == groups['etcd'][0]

- name: show key contents
  debug:
    var: hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.stdout

- name: Autoops | Create addon dir
  file:
    path: "{{ item }}"
    state: directory
    owner: root
    group: root
    mode: 0755
    recurse: yes
  with_items:
    - "{{ kube_config_dir }}/addons/etcdkeeper"
  when:
    - inventory_hostname == groups['kube_control_plane'][0]

- name: Autoops | Create manifests
  template: 
    src: "{{ item }}.yml.j2" 
    dest: "{{ kube_config_dir }}/addons/etcdkeeper/{{ item }}.yml"
  vars:
    etcdkeeper_cacert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.stdout }}"
    etcdkeeper_cert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cert_file.stdout }}"
    etcdkeeper_key: "{{ hostvars[groups['etcd'][0]].etcdkeeper_key_file.stdout }}"
  with_items:
    - etcdkeeper_ns
    - etcdkeeper_cm
    - etcdkeeper_deploy
    - etcdkeeper_svc
  register: etcdkeeper_manifests
  when:
    - inventory_hostname == groups['kube_control_plane'][0]

- name: Autoops | Apply manifests
  shell: "{{ bin_dir }}/kubectl apply -f {{ kube_config_dir }}/addons/etcdkeeper/{{ item.item }}.yml"
  with_items: "{{ etcdkeeper_manifests.results }}"
  when:
    - inventory_hostname == groups['kube_control_plane'][0]

- block:

- name: get remote file contents

command: "cat {{ etcdkeeper_cacert_file }}"

- name: get remote file contents

command: "cat {{ etcdkeeper_cert_file }}"

- name: get remote file contents

command: "cat {{ etcdkeeper_key_file }}"

when:

- inventory_hostname == groups['etcd'][0]

- name: show key contents

debug:

var: hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.stdout

- name: Autoops | Create addon dir

file:

path: "{{ item }}"

state: directory

owner: root

group: root

mode: 0755

recurse: yes

with_items:

- "{{ kube_config_dir }}/addons/etcdkeeper"

when:

- inventory_hostname == groups['kube_control_plane'][0]

- name: Autoops | Create manifests

template:

src: "{{ item }}.yml.j2"

dest: "{{ kube_config_dir }}/addons/etcdkeeper/{{ item }}.yml"

vars:

etcdkeeper_cacert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.stdout }}"

etcdkeeper_cert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cert_file.stdout }}"

etcdkeeper_key: "{{ hostvars[groups['etcd'][0]].etcdkeeper_key_file.stdout }}"

with_items:

- etcdkeeper_ns

- etcdkeeper_cm

- etcdkeeper_deploy

- etcdkeeper_svc

when:

- inventory_hostname == groups['kube_control_plane'][0]

- name: Autoops | Apply manifests

shell: "{{ bin_dir }}/kubectl apply -f {{ kube_config_dir }}/addons/etcdkeeper/{{ item.item }}.yml"

with_items: "{{ etcdkeeper_manifests.results }}"

when:

- inventory_hostname == groups['kube_control_plane'][0]

结果发现, 生成的配置里, 换行符都被换成了空格

尝试使用slurp模块:

- block:
  - name: Etcdkeeper | get remote ca file contents
    slurp:
      src: "{{ etcdkeeper_cacert_file }}"
    register: etcdkeeper_cacert_file

  - name: Etcdkeeper | get remote cert file contents
    slurp:
      src: "{{ etcdkeeper_cert_file }}"
    register: etcdkeeper_cert_file

  - name: Etcdkeeper | get remote key file contents
    slurp:
      src: "{{ etcdkeeper_key_file }}"
    register: etcdkeeper_key_file
  when:
    - inventory_hostname == groups['etcd'][0]


- name: Etcdkeeper | Create addon dir
  file:
    path: "{{ item }}"
    state: directory
    owner: root
    group: root
    mode: 0755
    recurse: yes
  with_items:
    - "{{ kube_config_dir }}/addons/etcdkeeper"
  when:
    - inventory_hostname == groups['kube_control_plane'][0]

- name: Etcdkeeper | Create manifests
  template: 
    src: "{{ item }}.yml.j2" 
    dest: "{{ kube_config_dir }}/addons/etcdkeeper/{{ item }}.yml"
  vars:
    etcdkeeper_cacert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.content | b64decode  | regex_replace('\n', '\n    ') }}"
    etcdkeeper_cert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cert_file.content | b64decode  | regex_replace('\n', '\n    ') }}"
    etcdkeeper_key: "{{ hostvars[groups['etcd'][0]].etcdkeeper_key_file.content | b64decode  | regex_replace('\n', '\n    ') }}"
  with_items:
    - etcdkeeper_ns
    - etcdkeeper_cm
    - etcdkeeper_deploy
    - etcdkeeper_svc
  register: etcdkeeper_manifests
  when:
    - inventory_hostname == groups['kube_control_plane'][0]

- block:

- name: Etcdkeeper | get remote ca file contents

slurp:

src: "{{ etcdkeeper_cacert_file }}"

- name: Etcdkeeper | get remote cert file contents

slurp:

src: "{{ etcdkeeper_cert_file }}"

- name: Etcdkeeper | get remote key file contents

slurp:

src: "{{ etcdkeeper_key_file }}"

when:

- inventory_hostname == groups['etcd'][0]

- name: Etcdkeeper | Create addon dir

file:

path: "{{ item }}"

state: directory

owner: root

group: root

mode: 0755

recurse: yes

with_items:

- "{{ kube_config_dir }}/addons/etcdkeeper"

when:

- inventory_hostname == groups['kube_control_plane'][0]

- name: Etcdkeeper | Create manifests

template:

src: "{{ item }}.yml.j2"

dest: "{{ kube_config_dir }}/addons/etcdkeeper/{{ item }}.yml"

vars:

etcdkeeper_cacert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cacert_file.content | b64decode | regex_replace('\n', '\n ') }}"

etcdkeeper_cert: "{{ hostvars[groups['etcd'][0]].etcdkeeper_cert_file.content | b64decode | regex_replace('\n', '\n ') }}"

etcdkeeper_key: "{{ hostvars[groups['etcd'][0]].etcdkeeper_key_file.content | b64decode | regex_replace('\n', '\n ') }}"

with_items:

- etcdkeeper_ns

- etcdkeeper_cm

- etcdkeeper_deploy

- etcdkeeper_svc

when:

- inventory_hostname == groups['kube_control_plane'][0]

结果换行符都保留了下来, 格式正确.

M	T	W	T	F	S	S
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30

通过ansible获取文件的几种方式

Published by sean on 11/07/202111/07/2021

0 Comments

Leave a Reply Cancel reply

HANDBOOK

解决ansible mitogen 0.3.0+ 插件未渲染ansible_ssh_common_args模板变量问题

MIDDLEWARE

nginx反向代理Harbor/配置https

MIDDLEWARE

nginx问题解决

通过ansible获取文件的几种方式

Published by sean on 11/07/202111/07/2021

0 Comments

Leave a Reply Cancel reply

Related Posts

HANDBOOK

解决ansible mitogen 0.3.0+ 插件未渲染ansible_ssh_common_args模板变量问题

MIDDLEWARE

nginx反向代理Harbor/配置https

MIDDLEWARE

nginx问题解决