On Tue, Apr 18, 2017 at 8:21 PM, Fong Yang <[email protected]> wrote: > > We're evaluating Ansible and other config management tools. I have two issues I would like input from others: > > 1) if you have to change ssh keys, what's the best way to do that across tens of thousands of machines? > > 2) if you have tens of thousands of servers under Ansible management, how do scale this to do them all quickly? Ideally, I want to be able run through a playbook across several thousand systems at once (assuming the playbooks will not be downloading additional packages from other hosts). Would be great if Ansible could have multiple controlling hosts but I don't think this is feature. > > Your input is appreciated.
Fong 1. There are various key management tools, all have their purpose. In CoreOS you could use cloudconfig/cloudinit for example. You can also use Ansible in raw mode to install the keys if needed in a bootstrap method. 2. Ansible is used in large sites to control great numbers of hosts. I recall several talks from Rackspace siting the running of a single playbook on thousands of hosts some years back now. If you are looking at this, pooling the work will help control the impact at scale of the playbooks. Ansible is a great tool and I hope it fits your needs. -- - Andrew "lathama" Latham - -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CA%2Bqj4S9nFgsfBegYdR08nfo%2B1GS6A9NPLVzpHQx0o%2BH669KhVw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
