meglory / ansible-role-npc_setup

ansible-role-npc_setup

How to use

$ ansible-galaxy install xiaopal.npc_setup \
    && ansible-playbook /etc/ansible/roles/xiaopal.npc_setup/tests/noop.yml

$ declare APP_KEY=<蜂巢APP_KEY> APP_SECRET=<蜂巢APP_SECRET> \
    && cat<<EOF >playbook.yml \
    && npc playbook --tags="setup" -T 30 playbook.yml \
    && read -p 'setup finished, press [enter] to cleanup...' \
    && npc playbook --tags="cleanup" playbook.yml
---
- hosts: localhost
  gather_facts: no
  tags: setup
  vars:
    # 公共配置
    npc_config:
      app_key: $APP_KEY
      app_secret: $APP_SECRET
      # 用于 ansible 管理的 ssh key 名称，自动在蜂巢创建并下载私钥到~/.npc/ssh_key.<name>
      ssh_key: 
        name: ansible-tests
      # 默认云主机镜像名称
      default_instance_image: Debian 8.6
      # 默认云主机规格
      default_instance_type:
        cpu: 2
        memory: 4G
    # 云硬盘
    npc_volumes:
      # 定义三块云硬盘，名称分别为 hd-test-gw,hd-test-a,hd-test-b, 容量20G
      - name: hd-test-{gw,{a..b}}
        capacity: 20G
        present: true
        path: /volumes/hd1
    # 云主机
    npc_instances: 
      # 定义云主机 debian-test-gw
      - name: 'debian-test-gw'
        present: true
        # 挂载云硬盘
        volumes:
          - hd-test-gw
        # 绑定外网IP: 取值可以是IP地址或any/new
        # any 绑定任意可用的外网IP，如果没有则新建IP；new 总是创建新IP
        wan_ip: any
        # 外网带宽
        wan_capacity: 10m
        # 作为ansible_host的地址类型：lan_ip私有IP（默认）, wan_ip公网IP
        ssh_host_by: wan_ip
        # ansible主机分组
        groups:
          - jump
      # 同时定义两台云主机 debian-test-a 和 debian-test-b
      - name: 'debian-test-w-{a..b}'
        present: true
        # 挂载云硬盘，其中hd-test-a挂载到debian-test-a， hd-test-b挂载到 debian-test-b
        volumes:
          - '*:hd-test-{a..b}'
        # 使用 debian-test-gw 作为 ssh 跳板机
        ssh_jump_host: debian-test-gw
        # ansible主机分组
        groups:
          - worker
        # ansible主机变量
        vars:
          host_var1: value
  roles: 
    - xiaopal.npc_setup
  tasks:
    - debug: msg={{groups["all"]}}
    # 等待跳板机ssh服务就绪
    - wait_for: port=22 host="{{npc.instances['debian-test-gw'].wan_ip}}" search_regex=OpenSSH delay=5

# 初始化云硬盘
- hosts: jump:worker
  tags: setup
  tasks:
    - with_items: '{{(npc_instance.volumes|default({})).values()}}'
      filesystem:
      # dev: /dev/vdc
        dev: '{{item.device}}'
        fstype: '{{item.fstype|default("ext4",true)}}'
        resizefs: true
    - with_items: '{{(npc_instance.volumes|default({})).values()}}'
      mount: 
        path: '{{item.path|default("/volumes/"~item.name, true)}}'
        src: '{{item.device}}'
        fstype: '{{item.fstype|default("ext4",true)}}'
        state: mounted

# 操作worker节点
- hosts: worker
  tags: setup
  tasks:
    - ping:
    - setup:
    - copy: 
        dest: /volumes/hd1/npc_instance.json
        content: "{{ npc_instance | to_json }}"

# 修改跳板机hosts
- hosts: jump
  tags: setup
  tasks:
    - blockinfile:
        path: /etc/hosts
        block: |
          {% for host in groups["worker"] %}{{ hostvars[host].npc_instance.lan_ip }} {{ host }}
          {% endfor %}

# 清理：删除所有主机和云硬盘
- hosts: localhost
  gather_facts: no
  tags: cleanup
  vars:
    npc_volumes:
      - name: hd-test-{gw,{a..b}}
        present: false
    npc_instances: 
      - name: 'debian-test-gw'
        present: false
      - name: 'debian-test-w-{a..b}'
        present: false
    npc_setup:
      add_hosts: false
  roles: 
    - xiaopal.npc_setup
EOF

npc setup

# npc playbook --setup <<EOF
---
npc_volumes:
  - name: test-hd-{1,2}
    capacity: 10G
npc_instances:
  - name: test-vm
    instance_type: {cpu: 2, memory: 4G}
    instance_image: Debian 8.6
    ssh_keys:
      - Xiaohui-GRAYPC 
    volumes:
      - test-hd-1
      - test-hd-2
EOF

# npc playbook --setup <<EOF
---
npc_volumes:
  - name: test-hd-{1,2}
    present: false
npc_instances:
  - name: test-vm
    present: false
EOF

支持VPC (NEW)

# npc playbook --setup <<EOF
---
npc_ssh_key: { name: test-ssh-key }

npc_instances:
  - name: vpc-instance-01
    zone: cn-east-1b
    instance_type: {series: 2, type: 2, cpu: 4, memory: 8G}
    instance_image: Debian 8.6
    vpc: test-vpc
    vpc_subnet: default
    vpc_security_group: test_group
    vpc_inet: yes
    vpc_inet_capacity: 10m
    present: yes

npc_vpc_networks:
  - name: test-vpc
    present: yes
    cidr: 10.177.0.0/16
    subnets:
      - subnet: default/10.177.231.0/24
        zone: cn-east-1b
      - subnet: 10.177.232.0/24
        zone: cn-east-1b
    security_groups:
      - security_group: test_group
        rules:
          - rule: ingress, 0.0.0.0/0, icmp
          - rule: ingress, default, all
          - rule: ingress, 10.0.0.0/8, {icmp,tcp/22,tcp/80,tcp/443,tcp/8000-9000}
          - rule: egress, 10.0.0.1, tcp/80-90
            present: no
      - security_group: unuse_group
        present: no
    route_tables:
      - route_table: '{main_route_table,test_table}'
        routes:
          - route: 192.168.99.0/24
            via_instance: vpc-instance-01

EOF