Week 01: 驱动架构、配置体系与 Inventory 深度实践

# 1. 简单主机范围
[web]
web[01:10].example.com  # 匹配 web01 到 web10

# 2. 嵌套组 (Children)
[shanghai]
sh1.example.com
sh2.example.com

[beijing]
bj1.example.com

[china:children] # 定义子组
shanghai
beijing

# 3. 带有变量的主机
[db]
db-master ansible_host=192.168.1.100 ansible_port=2222
db-slave  ansible_host=192.168.1.101

# 匹配所有以 web 或 db 开头, 且包含连续三个数字并以 .example.com 结尾的主机
ansible "~(web|db).*[0-9]{3}\.example\.com" -m ping

# ansible.cfg
[ssh_connection]
ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s

# ansible.cfg
pipelining = True

# inventory/aws_ec2.yml
---
plugin: amazon.aws.aws_ec2

regions:
  - us-east-1
  - us-west-2

# 过滤条件 (仅获取运行中的实例)
filters:
  instance-state-name: running
  "tag:Environment": production

# 基于标签构建主机组
keyed_groups:
  - key: tags.Role
    prefix: role
    separator: "_"
  - key: placement.availability_zone
    prefix: az
  - key: instance_type
    prefix: type

# 组合变量
compose:
  ansible_host: public_ip_address | default(private_ip_address)
  ansible_user: "'ec2-user'"
  instance_name: tags.Name | default(instance_id)

# 主机变量设置
hostnames:
  - tag:Name
  - private-dns-name
  - instance-id

# 列出所有主机
ansible-inventory -i inventory/aws_ec2.yml --list

# 以图形化方式展示
ansible-inventory -i inventory/aws_ec2.yml --graph

# 测试连通性
ansible -i inventory/aws_ec2.yml all -m ping

# inventory_plugins/my_cmdb.py
from ansible.plugins.inventory import BaseInventoryPlugin, Constructable
from ansible.errors import AnsibleError
import requests

DOCUMENTATION = r'''
name: my_cmdb
plugin_type: inventory
short_description: Inventory from internal CMDB
'''

class InventoryModule(BaseInventoryPlugin, Constructable):
    NAME = 'my_cmdb'
    
    def verify_file(self, path):
        """验证配置文件"""
        valid = False
        if super().verify_file(path):
            if path.endswith(('cmdb.yml', 'cmdb.yaml')):
                valid = True
        return valid
    
    def parse(self, inventory, loader, path, cache=True):
        """解析并填充 inventory"""
        super().parse(inventory, loader, path, cache)
        self._read_config_data(path)
        
        # 从 CMDB API 获取数据
        api_url = self.get_option('api_url')
        api_token = self.get_option('api_token')
        
        try:
            response = requests.get(
                f"{api_url}/api/v1/servers",
                headers={'Authorization': f'Bearer {api_token}'},
                timeout=30
            )
            response.raise_for_status()
            servers = response.json()
        except Exception as e:
            raise AnsibleError(f"Failed to fetch from CMDB: {e}")
        
        # 构建 inventory
        for server in servers:
            hostname = server['hostname']
            self.inventory.add_host(hostname)
            
            # 设置主机变量
            self.inventory.set_variable(hostname, 'ansible_host', server['ip'])
            self.inventory.set_variable(hostname, 'server_role', server.get('role'))
            
            # 添加到组
            group = server.get('environment', 'ungrouped')
            self.inventory.add_group(group)
            self.inventory.add_child(group, hostname)

inventory/
├── production/
│   ├── aws_ec2.yml      # AWS 动态获取
│   ├── azure_rm.yml     # Azure 动态获取
│   ├── static.yml       # 静态主机 (物理机, 特殊设备)
│   └── group_vars/
│       └── all.yml
├── staging/
│   ├── aws_ec2.yml
│   └── group_vars/
│       └── all.yml
└── development/
    └── static.yml

# 使用整个目录作为 Inventory
ansible-playbook -i inventory/production/ site.yml