Ansible Configuration Management Tool 소개 및 활용

1. Ansible
Configuration Management
&
/ AWS

2. • DevOps
• Ansible
• Ansible
• Inventory, Variable, Role, Template, Condition, Loop
•
• OS , , Packer Ansible
•

3. DevOps ..

4. DevOps? ?
Engineering Culture
Development Operation

5. DevOps? ?
Google DevOps 5
•
•
•
•
•

6. DevOps? ?
Eliminating Toils ( ) - Google SRE
•
•
•
•
• O(n)

7. Automation
Automation all the things!!
?

8. Automation
vs
https://liggat.org/automate-all-the-things/

9. Automation

10. CM Tool
• Ansible
• Chef
• Puppet
• SaltStack
• Etc..

11. CM Tool
• Tool Tool
• Tool ?
• / / / / OK

12. Ansible

13. Agentless

14. Ansible - Agentless
Agentless (SSH )
https://blog.knoldus.com/introduction-to-ansible/

15. Ansible - Agentless
Agentless (SSH )
Agent !
Agent .

16. Ansible - Agentless
SSH ...

17. Ansible - Agentless
SSH ...
SSH ? ...
Control ?
...?

18. Ansible - Agentless
SSH vs Agent

19. Ansible - Agentless
https://www.cvedetails.com/vulnerability-list/vendor_id-97/product_id-585/Openbsd-Openssh.html
https://www.cvedetails.com/vulnerability-list/vendor_id-15862/product_id-40551/Chef-Chef.html

20. YAML

21. Ansible - YAML
.
YAML

22. Ansible - YAML

23. Modules

24. Ansible - Modules
1850

25. Ansible - Modules
Linux Module
yum, apt, user, hostname, timezone, sysctl, cront, etc
IaC
ec2, ec2_elb, elb_target, lambda, ec2_vpc, sqs_queue, etc

26. Ansible - Modules
IaC (Infrastructure as Code)
Ansible ..? .
)
IaC Module ‘ ’ Ansible
Terraform CloudFormation

27. (idempotent)

28. Ansible -

29. Ansible -

30. Ansible -
• Module
• command, shell
•
•
• ...
•

32. Ansible - Inventory
/etc/ansible/hosts playbook directory hosts
host

33. Ansible -
Host Module Options

34. Ansible - (2)
, playbook

35. Ansible Playbook

36. Ansible Playbook

37. Ansible Playbook Tree
Ansible Playbook Home & Inventory
Role
target
Task Triggering Task
Playbooks
Role Dependency
Task
target + jinja2
. Default
Role

38. Ansible Playbook Tree
Ansible Playbook Home & Inventory
Role
target
Task Triggering Task
Task
target + jinja2
. Default
Playbooks
Role

39. Ansible Playbook Tree

40. Ansible Playbook
config & Inventory

41. Ansible Playbook Tree
Ansible Playbook Home & Inventory

42. Ansible configuration
ansible.cfg config
1. ANSIBLE_CONFIG
2. ansible.cfg ( )
3. ~/.ansible.cfg ( Home Dir)
4. /etc/ansible/ansible.cfg
2 - Git
Config

43. Inventory
hosts Inventory
(/etc/hosts )
Host IP
Host Group
Host Name

44. Ansible Playbook
playbook.yml

45. Ansible Playbook Tree
Playbooks
Role Directory = Role

46. Playbook
playbook/httpd.yml
Target Host
playbook ansible.cfg override
Role

47. Ansible Playbook
Tasks & Vars

48. Ansible Playbook Tree
Role Directory = Role
Tasks

49. Role / Var
httpd/vars/main.yml

50. Role / Task
httpd/tasks/main.yml
yum module Package
Loop

51. Ansible Playbook
Tasks & Templates & Vars

52. Role / Template
Role Directory = Role
Tasks
Template File

53. Role / Template
httpd/tasks/main.yml
template file
Template
+

54. Role / Template
httpd/templates/httpd-vhost.conf.j2

55. Ansible Playbook
Handler

56. Ansible Playbook Tree
Role Directory = Role
Tasks
Tasks Triggering Handler

57. Role / Handler
httpd/tasks/main.yml
Handler Triggering
Task Triggering .
( , role triggering)

58. Role / Handler
httpd/handlers/main.yml
tasks/main.yml

59. Role / Handler
Task
notify
(handler trigger)
Role
triggered
Role
Task
!

60. Role / Handler
= Handler

61. Role / Handler
httpd/tasks/main.yml
trigger handler

62. Role / Handler
Task
notify
(handler trigger)
Handler
Role/Task

63. Ansible Playbook
Role

64. Role
Tomcat Install
Playbook
Tomcat Install Role
Java Install Role
Scouter Server
Install Playbook
ScouterServer
Install Role
Role Playbook

65. Role
playbook/tomcat.yml playbook/scouter.yml

66. Ansible Playbook
AMI /

67. Immutable
Infrastructure

68. Mutable Infrastructure
Instance A
OS v1.0
App v1.0
Instance A
OS v1.1
App v1.0
Instance A
OS v1.1
App v1.1Mutable
Infrastructure
Status

69. Immutable Infrastructure
Instance A
OS v1.0
App v1.0
Instance
Image A
Instance A’
OS v1.1
App v1.0
Immutable
Infrastructure
Instance
Image B
Instance B
OS v1.1
App v1.0
Instance A’

70. Immutable Infrastructure
Instance A
OS v1.0
App v1.0
Instance
Image A
Instance A’
OS v1.1
App v1.0
Immutable
Infrastructure
Instance
Image B
Instance B
OS v1.1
App v1.0
Instance A’
CM Tool

71. Immutable
Infrastructure -

72. Immutable Infrastructure
Instance A
OS
Pure
Amazon
Linux
Instance A’
OS v1.0
Base
OS v1.0
ex)
package
OS agent

73. Immutable Infrastructure
Instance A
OS v1.0
Instance
Instance A’
OS v1.0
Middleware A v1.0
A
Base
OS Image
v1.0
Service A
Base OS
Image v1.0
Instance B
OS v1.0
B
Instance B’
OS v1.0
Middleware B v1.0
Service B
Base OS
Image v1.0

74. Service A
Base OS
Image v1.0
Service B
Base OS
Image v1.0
Immutable Infrastructure
Instance
Instance A
OS v1.0
Middleware A v1.0
A Source Code v1.0
Instance A’
OS v1.0
Middleware A v1.0
Instance
Instance B
OS v1.0
Middleware B v1.0
B Source Code v1.0
Instance B’
OS v1.0
Middleware B v1.0

75. Service A
Base OS
Image
v1.0
Service B
Base OS
Image
v1.0
Instance
Instance A
OS v1.0
Middleware A v1.0
A Source Code
Instance A’
OS v1.0
Middleware A v1.0
Instance
Instance B
OS v1.0
Middleware B v1.0
B Source Code
Instance B’
OS v1.0
Middleware B v1.0
Instance A
OS v1.0
Instance
Instance A’
OS v1.0
Middleware A
A
Base
OS Image
v1.0
Instance B
OS v1.0
B
Instance B’
OS v1.0
Middleware B
Instance A
OS
Pure
Amazon
Linux
Instance A’
OS v1.0

76. Immutable Infrastructure
/

77. Service A
Base OS
Image
v1.0
Service B
Base OS
Image
v1.0
Instance
Instance A
OS v1.0
Middleware A v1.0
A Source Code
Instance A’
OS v1.0
Middleware A v1.0
Instance
Instance B
OS v1.0
Middleware B v1.0
B Source Code
Instance B’
OS v1.0
Middleware B v1.0
Instance A
OS v1.1
Instance
Instance A’
OS v1.0
Middleware A
A
Base
OS Image
v1.0
Instance B
OS v1.1
B
Instance B’
OS v1.0
Middleware B
Instance A
OS
Pure
Amazon
Linux
Instance A’
OS v1.1
( )
Ansible
( )
Ansible .

78. Service A
Base OS
Image
v1.0
Service B
Base OS
Image
v1.0
Instance
Instance A
OS v1.0
Middleware A v1.0
A Source Code
Instance A’
OS v1.0
Middleware A v1.0
Instance
Instance B
OS v1.0
Middleware B v1.0
B Source Code
Instance B’
OS v1.0
Middleware B v1.0
Instance A
OS v1.1
Instance
Instance A’
OS v1.0
Middleware A
A
Base
OS Image
v1.0
Instance B
OS v1.1
B
Instance B’
OS v1.0
Middleware B
Instance A
OS
Pure
Amazon
Linux
Instance A’
OS v1.1
AMI

79. Instance Image
Packer

80. Packer

81. Packer
Image
Instance A
OS v1.0
Instance A’
OS v1.0
Middleware A v1.0
Image’

82. Packer
EC2
Template
Ansible CM Tool
Provisioning

83. Packer
..

84. Q & A