[ansible-project] CentOS 7 yum or pip

We want to stay current with the stable branch for ansible and the dependencies we use. We're a mostly Windows shop using WinRM with AD credentials, so we need... pywinrm pykerberos ansible anything those need (crypto, etc.) We are using CentOS 7.3.1611 (latest). Should we do a yum install

[ansible-project] Dynamic Inventory using Active Directory / LDAP

Does anyone have code that can pull a dynamic inventory from list of AD OUs? Want to use the windows_update module to patch our servers only in specific OUs. Maybe I missed it, but I don't see Windows Active Directory inventory here:

[ansible-project] Re: Testing playbooks and roles between Ansible versions

We do something similar when we merge code. Spin up a VM and run the new code changes basically. We just review the logs in jenkins (we use that as a frontend instead of Tower) and/or use the slack module to send ourselves any errors. We took the painful step of going from 2.2 and 2.4 and

[ansible-project] Retry SSH connection?

get this task to keep trying to connect? I could not find anything in the docs or Google to suggest an approach. Thank you, Aaron DevOps Blog: http://www.sharknet.us -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from

Re: [ansible-project] Test Driven Development with Ansible?

know plenty of tools designed to test custom apps/code, I don't think the IT testing tools have caught up yet. Maybe this isn't even an Ansible issue. I was just speculating on how it might include automated TDD-like test process in the framework. --- Aaron DevOps Blog: http://www.sharknet.us

Re: [ansible-project] Test Driven Development with Ansible?

wrote above: testing outcome not implementation. If I don't test the results of the playbook, how do I know the admin wrote the correct script? --Aaron On Wednesday, December 11, 2013 2:39:34 PM UTC-5, Brian Coca wrote: FYI, there are quite a few unit test already that verify that 'the file

Re: [ansible-project] Test Driven Development with Ansible?

run the tests. Nice. I'll give this a try. --Aaron On Wednesday, December 11, 2013 1:00:19 PM UTC-5, John Dewey wrote: Hi Aaron - I too would find it useful to have the ability to “unit test” my tasks. However, I have opted to create a testing playbook [1] which handles integration

[ansible-project] Internal process?

I'm trying to read ansible's source code, it would be much easier if there are some overall guidelines of how ansible is running internally, like, when to load related files, how to interpret playbook step by step. Can't find anything useful on the internet, that's weird for such a popular open

[ansible-project] Re: playbook is pending when I execute reboot command. How to avoid the pending?

I use the wait_for module to handle reboots. http://www.ansibleworks.com/docs/modules.html#wait-for Mine continues after a reboot so it may not fit your needs exactly. On Monday, December 23, 2013 4:07:59 AM UTC-5, rell...@gmail.com wrote: Hello all, My playbook process is: 1. disable

Re: [ansible-project] Dynamic role list

In general I agree that this isn't a great idea. However, I can see a case where one's infrastructure is more elastic, and shrinks and grows dynamically. VMs have made this case more likely. What do you think about passing a URL for the inventory and main playbook (site.yml) files? If you

[ansible-project] Re: Test Driven Development with Ansible?

write a new function in your program you test it, when you change your DHCP config you test it. If you care about quality the issue is not whether to test, it is only how to test. The Agile, DevOps approach is to automate everywhere hence the need for automated CM tests like serverspec. --Aaron

[ansible-project] Ansible Design Pattern Question

users are addressing this. How do you keep everything consistent when you have a conf file and you are making small direct changes (named.conf vs nsupdate)? What kind of playbook do you use for nsupdate like changes? Thanks, Aaron -- You received this message because you are subscribed

[ansible-project] Minor Change for Standalone Plays

I often want to create and share stand-alone, single plays (i.e., some_task.yml). Ansible makes it very easy to automate tedious admin tasks so I like to use it instead of old-school shell scripting. This works fine of course but there is one small friction point in the form of the inventory

[ansible-project] Re: Ansible XenServer VM Playbook Guide Posted

. --Aaron On Wednesday, February 26, 2014 11:00:34 AM UTC-5, Pavel Sakun wrote: Hi Aaron. The link above gives 404, corrent one is http://sharknet.us/2013/12/13/276/ Pavel. On Wednesday, December 25, 2013 1:24:43 AM UTC+3, Aaron Hunter wrote: Hello, I just posted an in-depth guide

[ansible-project] Re: When to use role dependencies?

modular approach will also be more Ansible Galaxy friendly. Modular roles will be easier to swap out for better quality community one from Galaxy. --Aaron On Tuesday, February 25, 2014 9:21:26 AM UTC-5, chris_...@sra.com wrote: I'm trying to figure out when and how best to use role

[ansible-project] Firewall Module?

Do the Ansible developers have plans to build a firewall module? I think one is strongly needed. Right now we have to use a variety of kludges to get it this to work. Firewall management is an essential sys admin task and should be supported. Ansible Galaxy needs it because currently there is

Re: [ansible-project] Firewall Module?

place custom file snippets in it. If order is important then they are often named 01file, 02file, etc. This is the pattern I am arguing for implementing as an Ansible module. On Tue, Mar 4, 2014 at 7:59 AM, Aaron Hunter aaron@gmail.comjavascript: wrote: Do the Ansible developers have

Re: [ansible-project] Firewall Module?

Plus, the aforementioned groups that want to maintain their own firewall configurations, which we suggest, and you can see an example of here: https://github.com/ansible/ansible-examples/blob/master/lamp_haproxy/roles/common/templates/iptables.j2 I disagree with the approach taken in

[ansible-project] Odd global variable substitition behavior

variable is defined directly, e.g. vcpus: 2, it works fine. I do this to avoid repeating data like the gateway IP address multiple times. Is there a Jinja trick or something else I can try to get it resolve these nested variables? Thanks, Aaron -- You received this message because you

[ansible-project] Manage group_vars with vault?

I'd like to manage a subset of group_vars variables with vault. That is, split the variables group_vars/all so that some are in plaintext and some are managed by vault. Is it possible for group_vars/all to -include a vault managed file? I'd like to use the normal group_vars mechanism but

Re: [ansible-project] Limit playbook run by role?

at the top (or perhaps under a site) might be a simpler way than groups to manage production, staging, etc. Site - 1..n Environment - 1..n Groups - 1..n Hosts --Aaron On Wednesday, April 23, 2014 10:26:55 AM UTC-4, Michael DeHaan wrote: It's unlikely we'd want to add more CLI

Re: [ansible-project] Limit playbook run by role?

want to run the tasks in the common role and you have other roles that require common vars. The only problem with this approach is that I don't believe the tags will propagate if you have a role with dependencies or other includes. -John On Wed, Apr 23, 2014 at 11:08 AM, Aaron

Re: [ansible-project] Limit playbook run by role?

. This is the idea at least. I'm still working through the toolchain to support it and how to adapt Ansible to this model. On Sunday, April 27, 2014 2:18:33 PM UTC-4, Adam Morris wrote: On Sunday, April 27, 2014 4:49:15 AM UTC-7, Aaron Hunter wrote: Peter, As for terminology I use baseline

[ansible-project] Re: Are Roles enough?

and then customize the tools to support them. --Aaron On Tuesday, June 3, 2014 12:38:45 AM UTC-4, David Carmean wrote: I was happy to see roles when I came back to Ansible after a few months, but i've been struggling with how to apply them. I think this is partly because of cognitive dissonance

Re: [ansible-project] Problems setting up WinRM

I'm completely new to Ansible but when I saw that Windows support is being added I had to jump right in this morning. So far my Ansible instance can talk to a test Linux host with no issues. For my Windows box I stumbled across your #1 and #2 items mentioned above but I'm not sure what you mean

Re: [ansible-project] Problems setting up WinRM

a newb. - Aaron On Wednesday, July 30, 2014 4:13:45 PM UTC-7, Damon Overboe wrote: The local Administrator account should work, and you don't need to remove it from the domain. I was trying to say a user account that's registered on the domain doesn't seem to be supported currently... or I

[ansible-project] ec2_group - passing a list to a rule fails on subsequent runs.

Hi all, I'm using Ansible 1.7 and trying to populate an ec2_group with a list of allowed IPs inbound. My playbook looks like so: --- - name: Allow specific hosts to talk to my instance hosts: localhost connection: local vars: ec2_region: us-east-1 vpc_id: vpc-12345 sg_name:

Re: [ansible-project] ec2_group - passing a list to a rule fails on subsequent runs.

:30:50 PM UTC-6, James Cammarata wrote: Hi Aaron, is it valid to specify a list of IPs for the cidr_ip value in the rules (or was this a cut/paste mistake)? -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group

Re: [ansible-project] ec2_group - passing a list to a rule fails on subsequent runs.

this may be the best method anyway. Thanks for your help. -Aaron On Friday, September 5, 2014 1:36:31 PM UTC-6, James Cammarata wrote: I ask, because as far as I can tell from looking at the source code, we do not check that the cidr_ip may be a list of IPs rather than a single item

[ansible-project] Docker module does not restart containers when docker parameters have changed

variables to containers. It would be nice if the Ansible docker modules realizes docker parameters have changed, then automatically restart the container. I don't think volume or port will change often but configuration information via environment variables will certainly evolve over time. Aaron

Re: [ansible-project] Docker module does not restart containers when docker parameters have changed

that can be done as a separate PR. I believe just the environmental detection is useful on its own. Aaron On Wednesday, September 24, 2014 12:17:11 PM UTC-4, Michael DeHaan wrote: There are no plans per se but that doesn't mean it's not a good idea. I think it would depend on whether

Re: [ansible-project] Re: Docker module does not restart containers when docker parameters have changed

. Aaron -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project

Re: [ansible-project] Docker module does not restart containers when docker parameters have changed

Understood. I'm still working on it. I will definitely send PR when I am ready. Aaron On Thursday, October 2, 2014, Michael DeHaan mich...@ansible.com wrote: Just a note - please send in a PR if you have something, if you just send me the diff on your branch and master, we won't have

[ansible-project] Incorrect sudo password when trying to dynamically set ansible_sudo_pass

Hi. I am trying to set up an environment using different passwords for different hosts: In ./group_vars/all I have the line: --- ansible_sudo_pass: {{ lookup('password', 'passwords/' + inventory_hostname) }} #ansible_sudo_pass: hardcoded test password (basically stolen from this page:

[ansible-project] vars_prompt defaults not evaluating correctly with bool filter

bool(a string) True Is there something I'm missing with regard to testing the truthiness/falsiness of a string? This is Ansible 1.8.2. Many thanks, -Aaron -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group

[ansible-project] Help with EC2 Module

error and ainsible is not really telling me (the non-initiated) anything. Any help is much appreciated! -Aaron. -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group and stop receiving emails from it, send an email

[ansible-project] failed_when/changed_when with script module

I'm using ansible 2.0, and I'm trying to create a script play which will correctly flag when a change was made, but so far I've been unable to get this to work. Here's what I have for the play: - script: script {{ arg }} register: command_result failed_when: command_result.rc != 0 and

Re: [ansible-project] Ansible Tower stuck on Host verification

I had a similar issue. Make sure you have exec rights in tmp On Wednesday, May 20, 2015 at 8:05:40 AM UTC-5, Timothy Gerla wrote: Hi Andres, Can you email sup...@ansible.com javascript: with your issue? We'll be happy to help. This mailing list is primarily for Ansible open source

[ansible-project] Re: Ansible Tower stuck on Host verification

I had a similar issue. Make sure you have exec rights in tmp On Wednesday, May 20, 2015 at 7:41:00 AM UTC-5, Andres Ivanov wrote: Hello, I'm trying to learn Ansible and started with installing Ansible with Tower UI. Tried simple Helloworld echo task that fails on Tower but works manually

[ansible-project] Re: Ansible 2.0 -- shade is required for this module

Exact same setup, same problem. I opened an issue on Github but it got shot down :-) Maybe if this is an actual problem it can get re-opened: https://github.com/ansible/ansible-modules-core/issues/1910 Aaron On Wednesday, 29 July 2015 20:26:48 UTC+1, Chris Gordon wrote: I'm trying to use

[ansible-project] Newbie question on ansible inventory?

Hi there, Im just starting with ansible so I appologise if this is a stupid question. I have am wanting to try do use ansible to deploy .war web app's to several QA servers. Each QA server hosts serveral instances of the app's across multiple instances of tomcat per server (production is 1 per

[ansible-project] Re: Newbie question on ansible inventory?

ission's on new app4 war file shell: chown tomcat:tomcat /usr/local/tomcat2/webapps/app4.war when: ansible_hostname == "qa02" On Monday, 14 September 2015 13:20:07 UTC+1, Aaron Eldridge wrote: > > Hi there, Im just starting with ansible so I appologise if this is a &g

[ansible-project] bad characters in arguments\r\n

~ youmoo $ ansible --version ansible 2.1.0 (devel 2d11cfab92) last updated 2015/12/30 09:22:34 (GMT +800) lib/ansible/modules/core: (detached HEAD 002028748f) last updated 2015/12/30 09:22:49 (GMT +800) lib/ansible/modules/extras: (detached HEAD f6a7b6dd1f) last updated 2015/12/30 09:23:02

[ansible-project] Playbook command on windows machine

Good morning, I am running Ansible 2.0 on my Debian host machine. I have successfully connected to my windows server 2008 m via ping and other types of playbooks. I am currently attempting to run a playbook that grabs a program off of a shared network folder and installs it on the desired

[ansible-project] Re: ansible ping failing intermittently "send fds failed\r\nlost connection\n"

Do you have SSH Set up? On Monday, June 6, 2016 at 8:28:32 AM UTC-6, Robert Haskins wrote: > > I am having an issue with Ansible ping failing intermittently. My > environment is as follows: > > *version*: ansible 2.2.0 (devel 643a7ec01d) last updated 2016/06/03 > 13:22:45 (GMT -400) > *config

[ansible-project] Re: ansible ping failing intermittently "send fds failed\r\nlost connection\n"

On Monday, June 6, 2016 at 8:28:32 AM UTC-6, Robert Haskins wrote: > > I am having an issue with Ansible ping failing intermittently. My > environment is as follows: > > *version*: ansible 2.2.0 (devel 643a7ec01d) last updated 2016/06/03 > 13:22:45 (GMT -400) > *config settings (changed from

[ansible-project] Ansible playbook help

I am attempting to add a task within my playbook that alters a conf file. I want to add text within a selected line. I don't want to delete the line and then add the line back with the added text I need the line to remain as I may add to it from other playbooks from time to time. Basically

[ansible-project] how to use insertbefore/after correctly?

lineinfile: dest=/etc/rsyslog.conf insertafter="\*\.\*\;auth\,authpriv\.none" regexp="\*\.\*\;auth\,authpriv\.none" line="Listen 8080" The only thing that happens here is Listen 8080 replaces the *.*;auth,authpriv.none line. should it not be placing it after it??? -- You received this

[ansible-project] NEED HELP - connecting via winrm

I am having trouble connecting to a windows vm via the ansible winrm connection. I am using ansible 2.0.2 *host settings* [Windows] GP1-LAB-OPSTST2.com 192.168.30.101.com [Windows_var] ansible_ssh_user= ansible_ssh_pass= ansible_ssh_port=5985 ansible_connection=winrm *ansible returns*

[ansible-project] Re: Installation of 2.0

I am getting an error at this part... On Tuesday, May 31, 2016 at 9:27:11 AM UTC-6, aaron.t...@total.care wrote: > > >

[ansible-project] Re: Installation of 2.0

Problem fixed. Thanks. On Tuesday, May 31, 2016 at 9:27:11 AM UTC-6, aaron.t...@total.care wrote: > > > > > > I am in need of assistance in upgrading Ansible to version

[ansible-project] Install software to Windows machine...

Thanks for all your help earlier, it was greatly appreciated. Now I am attempting to automate installation of some software across all my Windows VM's . I have found some documentation on the web but am still having trouble. At this point it is getting hung up on the last line. The playbook

[ansible-project] Installation of 2.0

I am in need of assistance in upgrading Ansible to version 2.0. Every time I attempt to install I get the 1.7.2 version. I have about 10 windows vm machines that I

RE: [ansible-project] Re: Installation of 2.0

No only via get-apt and PPA, I will try it via PIP From: ansible-project@googlegroups.com [mailto:ansible-project@googlegroups.com] On Behalf Of Eric S Sent: Tuesday, May 31, 2016 9:30 AM To: Ansible Project Subject: [ansible-project] Re: Installation of 2.0

[ansible-project] Re: Installation of 2.0

can you tell me what this installing here? sudo apt-get install asciidoc make debhelper cdbs devscripts it is taking forever to do it looks like a lot of files... -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group

[ansible-project] Yumrepo is not being located in ansible 2.1 using Ansible Tower

I am trying to use yumrepo https://docs.ansible.com/ansible/yumrepo_module.html and it states that it is new in version 2.1 So i went ahead and updated ansible on my ansible tower machine: sudo yum -y install git asciidoc rpm-build python2-devel cd ~ git clone

[ansible-project] Ansible not becoming super user

I have the following playbook --- - name: myPlaybook hosts: "{{machine_to_setup}}" remote_user: "{{user_to_use}}" become: yes roles: # Install Gosa - part 1 - { role: gosa, become: yes } (I know become is duplicated. With the following role content: --- # Requires Ansible

Re: [ansible-project] Ansible not becoming super user

If i run the yum install as the machineAdmin user it is fine on the machine. Ansible is somehow losing the privledges? And it's using su machineAdmin cause ansible tower is configured that the sshUser's privelege escalation is of type su and with credentials for machineAdmin (In reality both

Re: [ansible-project] Ansible not becoming super user

If i go into visudo (centos) I have the following sshUser ALL=(ALL) NOPASSWD: ALL machineAdminALL=(ALL) NOPASSWD: ALL so yes? On Tuesday, March 22, 2016 at 9:48:25 PM UTC+1, Benjamin Redling wrote: > > On 2016-03-22 20:25, Aaron Axisa wrote: > > TASK [gosa :

Re: [ansible-project] Ansible not becoming super user

TASK [gosa : Install EPEL Package] * task path: /var/lib/awx/projects/_8__bitbucket_ldap/ansible/roles/gosa/tasks/main.yml:15 <192.168.20.4> ESTABLISH SSH CONNECTION FOR USER: sshUser <192.168.20.4> SSH: ansible.cfg set ssh_args:

Re: [ansible-project] Ansible not becoming super user

Updating the ansible credentials to leave out the privelege escalation worked thanks On Tuesday, March 22, 2016 at 10:15:44 PM UTC+1, Brian Coca wrote: > > I believe the issue is you are using become wrong, as per that sudoers > file you can just leave the `become_user: root` and it will work

[ansible-project] SSH connection issue

<172.28.4.35> ESTABLISH SSH CONNECTION FOR USER: centos <172.28.4.35> SSH: EXEC ssh -C -q -o ControlPersist=60s -q -o 'IdentityFile="D:/DOCUMENTS/CLOUD/aaron-engg-keypair.pem"' -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keye

Re: [ansible-project] SSH connection issue

under Cygwin by the look of it, that's not supported. > > Can you install a small VM to run Ansible from? > > On 19 August 2016 at 22:28, Aaron Bernardino > <aaron.be...@schange.com > wrote: > > I'm running a playbook where tasks are failing with error message

[ansible-project] Dynamic inventory / Inline content help

hat I want to be able to do is in the dynamic inventory field be able to send one or more ID and it return the correctly formatted JSON script but i can't seem to do this with ec2.py can any one help? Thank you Aaron -- You received this message because you are subscribed to the Google Groups

[ansible-project] Rescue all hosts if one host fails

There is no possibility to run the rescue part for all hosts if one host fails. I'm working on my deployment for a website. I want to deploy the site to multiple hosts. If something fails for one host than all hosts should not be deployed. Therefore, a rollback on all hosts should happen. The

[ansible-project] Re: Get details of installed iis websites

Looks like it returns app pool and Physical Path (assume you mean location on disk): https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/windows/win_iis_website.ps1 if ($site) { $result.site = @{ Name = $site.Name ID = $site.ID State = $site.State

[ansible-project] Re: [Windows] Install visual studio

+1 for Chocolatey. Way easier to manage updates and install software and it pulls straight from the vendor if you use an internet package versus your own chocolatey repository. On Thursday, January 25, 2018 at 4:03:50 PM UTC-5, J Hawkesworth wrote: > > I have successfully installed visual

[ansible-project] Re: Running PowerCli scripts within PowerShell scripts in Ansible

Old thread, but some newer tools have come out since. Not sure the status of vCNS, but NSX seems to be decently covered with some of these tools. Look at these: - vcd-cli: https://github.com/vmware/vcd-cli - PowerCLI 10.0.0: https://code.vmware.com/tool/vmware-powercli/10.0.0

[ansible-project] Re: Running PowerCli scripts within PowerShell scripts in Ansible

Oh and PowerCLI 10.0.0 has Linux support, also, so you could run it from your Ansible control machine. On Wednesday, March 14, 2018 at 8:56:32 AM UTC-4, Aaron K wrote: > > Old thread, but some newer tools have come out since. Not sure the status > of vCNS, but NSX seems to be

[ansible-project] Re: Using powercli in Ansible

Try PowerCLI 10.0 from the Linux box or if you want to use the Windows version of PowerCLI, delegate your tasks to your Windows machine that has PowerCLI installed. On Sunday, May 28, 2017 at 10:38:42 AM UTC-4, Bob Nian wrote: > > This is because I've to harden my vSphere esxi host using script

[ansible-project] Re: Looping through a dictionary to create links

: "{{ item.item.0.1.dest }}" state: link become: true when: - item is not skipped loop: "{{ linkslist.results }}" On Friday, July 26, 2019 at 3:44:27 PM UTC+12, Aaron Hicks wrote: > > The Python equivalent I'm trying to make is: > > for shared

Re: [ansible-project] Send playbook output to Logstash/Elasticsearch

Late to the game, but this is the best ranked answer so far: Is there a callback that logs _directly_ to ElasticSearch without logstash? On Saturday, January 28, 2017 at 9:06:10 AM UTC+13, Ievgen Khmelenko wrote: > > Try to use the new version >

[ansible-project] Looping through a dictionary to create links

sults|product(filesystems|dict2items)|list }}" Now what I want to do for each filesystem mount that exists, I'd like to create a link from source to target for each list of link hashes associated with each filesystem. Doing this in Python is almost trivial, but a massive pain in A

[ansible-project] Transparently Encrypt Select Files within a Git Repository

] https://github.com/elasticdog/transcrypt -- Aaron Bull Schaefer http://elasticdog.com/ -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr