6.Ansible Roles角色实战

Roles小技巧:

1.创建roles目录结构，手动或使用ansible-galaxy init test roles

2.编写roles的功能，也就是tasks。 nginx rsyncd memcached

3.最后playbook引用roles编写好的tasks

1.创建标准roles目录结构
mkdir /root/roles/nginx/{tasks,templates,handlers}

2.编写tasks
[root@manager ~]# cat /root/roles/nginx/tasks/main.yml
- name: Install Nginx Server
  yum:
    name: nginx
    state: present

- name: Configure Nginx Server
  template:
    src: nginx.conf.j2
    dest: /etc/nginx/nginx.conf
  notify: Restart Nginx Server

- name: Systemd Nginx Server
  systemd:
    name: nginx
    state: started
    enabled: yes

3.template
[root@manager roles]# cat /root/roles/nginx/templates/nginx.conf.j2
user www;
worker_processes  {{ ansible_processor_vcpus }};

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;

events {
    worker_connections  {{ ansible_processor_vcpus * 1024 }};
}
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
	access_log /var/log/nginx/access.log main;

    sendfile        on;
    #tcp_nopush     on;
    keepalive_timeout  65;
    #gzip  on;
    include /etc/nginx/conf.d/*.conf;
}

4.handlers
[root@manager ~]# cat /root/roles/nginx/handlers/main.yml
- name: Restart Nginx Server
  systemd:
    name: nginx
    state: restarted

5.调用playbook
[root@manager roles]# cat /root/roles/site.yml
- hosts: webservers
  roles:
    - nginx

PS：hosts ansible.cfg  提前需准备好

实战一：roles部署memcached

#安装
#配置
#启动

1.创建roles的目录结构
[root@manager roles]# mkdir memcached/{tasks,templates,handlers} -p

2.编写对应的tasks  (1.安装  2配置(templates)  3.启动  4.重启(handlers) )
[root@manager roles]# cat memcached/tasks/main.yml
- name: Installed Memecached Server
  yum:
    name: memcached
    state: present

- name: Configure Memcached Server
  template:
    src: memcached.j2
    dest: /etc/sysconfig/memcached
  notify: Restart Memcached Server

- name: System Memcached Server
  systemd:
    name: memcached
    state: started
    enabled: yes

3.配置jinja2
[root@manager roles]# cat memcached/templates/memcached.j2
PORT="11211"
USER="memcached"
MAXCONN="1024"
CACHESIZE="{{ ansible_memtotal_mb //2 }}"
OPTIONS=""

4.handlers
[root@manager roles]# cat memcached/handlers/main.yml
- name: Restart Memcached Server
  systemd:
    name: memcached
    state: restarted

5.playbook调用roles
[root@manager roles]# cat site.yml
- hosts: webservers
  roles:
    - { role: nginx, tags: web }
    - { role: memcached, tags: cache }

实战二：部署NFS存储服务

#1.创建项目目录结构   --->
[root@manager roles]# mkdir nfs/{tasks,templates,handlers} -p

#2.编写task任务

#3.playbook调用roles项目

[root@ansible roles]# tree nfs/
nfs/
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
└── templates
    └── exports.j2

1.tasks编写
[root@ansible nfs]# cat tasks/main.yml
- name: Installed NFS Server
  yum:
    name: nfs-utils
    state: present

- name: Configure NFS Server
  template:
    src: exports.j2
    dest: /etc/exports
  notify: Restart NFS Server

- name: Create NFS Server Share Directory
  file:
    path: "{{ nfs_word }}"
    state: directory
    owner: "{{ nfs_user }}"
    group: "{{ nfs_user }}"
    mode: '0755'
    recurse: yes

- name: Started NFS Server
  systemd:
    name: nfs
    state: started
    enabled: yes

2.触发重启，配置handlers
[root@ansible nfs]# cat handlers/main.yml
- name: Restart NFS Server
  systemd:
    name: nfs
    state: restarted

3.调用roles项目
[root@ansible roles]# cat site.yml
- hosts: nfsservers
  roles:
    - { role: nfs, tags: nfs }

实战三：roles部署LB

1.nginxProxy+keepalived 10.0.0.5 10.0.0.6 10.0.0.3

2.nginx静态网站 172.16.1.7 172.16.1.8

1.web编写tasks任务
[root@manager web]# cat tasks/main.yml
#1.安装nginx服务
- name: Install nginx Server
  yum:
    name: nginx
    state: present

#2.创建用户组
- name: Create group
  group:
    name: "{{ user }}"
    gid: "{{ uid }}"

#3.创建用户
- name: create user
  user:
    name: "{{ user }}"
    uid: "{{ uid }}"
    group: "{{ user }}"
    create_home: no
    shell: /sbin/nologin

#4.创建站点目录
- name: Create code directory
  file:
    path: "{{ code }}"
    owner: "{{ user }}"
    group: "{{ user }}"
    mode: 0755
    recurse: yes

#5.配置nginx
- name: Configure Nginx Server
  template:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
    mode: "{{ item.mode }}"
  with_items:
    - { src: nginx.conf.j2, dest: /etc/nginx/nginx.conf, mode: '0644' }
    - { src: index.html, dest: /code, mode: '0644' }
    - { src: web.conf.j2, dest: /etc/nginx/conf.d/web.conf, mode: '0644' }
  notify: Restart nginx Server

#6.启动nginx服务
- name: Systemd Nginx Server
  systemd:
    name: nginx
    state: started

2.handlers触发重启nginx
[root@manager web]# cat handlers/main.yml
- name: Restart nginx Server
  systemd:
    name: nginx
    state: restarted

3.准备j2文件
[root@manager roles]# tree web/
web/
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
└── templates
    ├── index.html
    ├── nginx.conf.j2
    └── web.conf.j2

4.LB编写tasks任务
[root@manager lb]# cat tasks/main.yml
- name: Intalled Nginx Server
  yum:
    name: "{{ packages }}"
    state: present
  vars:
    packages:
    - nginx
    - keepalived

- name: Create shell share directory
  file:
    path: "{{ script }}"
    state: directory

- name: Configure nginx server
  template:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
    mode: "{{ item.mode }}"
  with_items:
    - { src: nginx.conf.j2, dest: /etc/nginx/nginx.conf, mode: '0644' }
    - { src: keepalived.conf.j2, dest: /etc/keepalived/keepalived.conf, mode: '0644' }
    - { src: check_server.sh, dest: /server/scripts/check_server.sh, mode: '0777' }
    - { src: proxy_web.conf, dest: /etc/nginx/conf.d/proxy_web.conf, mode: '0644' }
    - { src: proxy_params, dest: /etc/nginx/proxy_params, mode: '0644' }
  notify: Restart Nginx Server
- name: Systemd Nginx server
  systemd:
    name: "{{ item }}"
    state: started
    enabled: yes
  with_items:
    - nginx
    - keepalived

5.handlers触发重启nginx服务
[root@manager lb]# cat handlers/main.yml
- name: Restart Nginx Server
  systemd:
    name: nginx
    state: restarted

6.配置keepalived
[root@manager lb]# cat files/keepalived.conf.j2
global_defs {
    router_id {{ ansible_fqdn }}
}

vrrp_instance VI_1 {
{% if ansible_fqdn == 'lb01' %}
#lb01的配置如下：
    state MASTER
    priority 150
{% elif ansible_fqdn == 'lb02' %}
#lb02的配置如下：
    state BACKUP
    priority 100
{% endif %}

    interface eth0
    virtual_router_id 50
    advert_int 1

    authentication {
        auth_type PASS
        auth_pass 1111
}
    virtual_ipaddress {
        10.0.0.3
    }
}

7.准备对应的j2文件
[root@manager roles]# tree lb/
lb/
├── files
│   └── keepalived.conf.j2
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
│   ├── check_server.sh
│   ├── keepalived.conf.j2
│   ├── nginx.conf.j2
│   ├── proxy_params
│   └── proxy_web.conf