Mixing
Using ansible to update SSH keys for groups of servers
I'm really loving ansible, and I'd like to use it to help me manage ssh keys. I've used small code examples as a test, and proved the basic software works as expected.
I have my servers in the hosts file, with group names like <application><servertype><environment>. For example: AlfrescoAppProd, AlfrescoDBDev, etc. These are then grouped in more logical groups, such as Prod (all production servers), DB (all database servers), etc.
Ultimately I'd like to run an "AddSSHKeys.yml" playbook, have it prompt me for the group (Prod, App, etc), have it prompt me for the location of the public key to add, then that key would be applied to all servers matching the input.
I think I'm on the right path, but wanted to verify with you fine people. Let me know if I'm going about this the wrong way or making it more complex than necessary before I code it for all of our servers.
Thanks,
-Scott
ansible
asked Jan 2 at 18:40
genevishgenevish
4817
add a comment |
I'm really loving ansible, and I'd like to use it to help me manage ssh keys. I've used small code examples as a test, and proved the basic software works as expected.
I have my servers in the hosts file, with group names like <application><servertype><environment>. For example: AlfrescoAppProd, AlfrescoDBDev, etc. These are then grouped in more logical groups, such as Prod (all production servers), DB (all database servers), etc.
Ultimately I'd like to run an "AddSSHKeys.yml" playbook, have it prompt me for the group (Prod, App, etc), have it prompt me for the location of the public key to add, then that key would be applied to all servers matching the input.
I think I'm on the right path, but wanted to verify with you fine people. Let me know if I'm going about this the wrong way or making it more complex than necessary before I code it for all of our servers.
Thanks,
-Scott
ansible
asked Jan 2 at 18:40
genevishgenevish
4817
add a comment |
I'm really loving ansible, and I'd like to use it to help me manage ssh keys. I've used small code examples as a test, and proved the basic software works as expected.
I have my servers in the hosts file, with group names like <application><servertype><environment>. For example: AlfrescoAppProd, AlfrescoDBDev, etc. These are then grouped in more logical groups, such as Prod (all production servers), DB (all database servers), etc.
Ultimately I'd like to run an "AddSSHKeys.yml" playbook, have it prompt me for the group (Prod, App, etc), have it prompt me for the location of the public key to add, then that key would be applied to all servers matching the input.
I think I'm on the right path, but wanted to verify with you fine people. Let me know if I'm going about this the wrong way or making it more complex than necessary before I code it for all of our servers.
Thanks,
-Scott
ansible
asked Jan 2 at 18:40
genevishgenevish
4817
I'm really loving ansible, and I'd like to use it to help me manage ssh keys. I've used small code examples as a test, and proved the basic software works as expected.
I have my servers in the hosts file, with group names like <application><servertype><environment>. For example: AlfrescoAppProd, AlfrescoDBDev, etc. These are then grouped in more logical groups, such as Prod (all production servers), DB (all database servers), etc.
Ultimately I'd like to run an "AddSSHKeys.yml" playbook, have it prompt me for the group (Prod, App, etc), have it prompt me for the location of the public key to add, then that key would be applied to all servers matching the input.
I think I'm on the right path, but wanted to verify with you fine people. Let me know if I'm going about this the wrong way or making it more complex than necessary before I code it for all of our servers.
Thanks,
-Scott
ansible
ansible
asked Jan 2 at 18:40
genevishgenevish
4817
asked Jan 2 at 18:40
genevishgenevish
4817
asked Jan 2 at 18:40
genevishgenevish
4817
asked Jan 2 at 18:40
genevishgenevish
4817
asked Jan 2 at 18:40
genevishgenevish
4817
4817
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Ansible is not really an interactive tool. You should avoid using patterns with user interaction.
Nevertheless you can pass everything you want in command line. The simplest way is to use -e option (it can be repeated few times if needed). It set variable to a specified value. F.e. ansible-playbook -i myinventory play.yaml -e "ssh_key=AAAA....". For more advanced things you can use lookup plugins (they can read files from localhost), and you can pass filename as variables.
For really grandiose sets of data you can use include_vars.
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54011522%2fusing-ansible-to-update-ssh-keys-for-groups-of-servers%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Ansible is not really an interactive tool. You should avoid using patterns with user interaction.
Nevertheless you can pass everything you want in command line. The simplest way is to use -e option (it can be repeated few times if needed). It set variable to a specified value. F.e. ansible-playbook -i myinventory play.yaml -e "ssh_key=AAAA....". For more advanced things you can use lookup plugins (they can read files from localhost), and you can pass filename as variables.
For really grandiose sets of data you can use include_vars.
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
add a comment |
Ansible is not really an interactive tool. You should avoid using patterns with user interaction.
Nevertheless you can pass everything you want in command line. The simplest way is to use -e option (it can be repeated few times if needed). It set variable to a specified value. F.e. ansible-playbook -i myinventory play.yaml -e "ssh_key=AAAA....". For more advanced things you can use lookup plugins (they can read files from localhost), and you can pass filename as variables.
For really grandiose sets of data you can use include_vars.
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
add a comment |
Ansible is not really an interactive tool. You should avoid using patterns with user interaction.
Nevertheless you can pass everything you want in command line. The simplest way is to use -e option (it can be repeated few times if needed). It set variable to a specified value. F.e. ansible-playbook -i myinventory play.yaml -e "ssh_key=AAAA....". For more advanced things you can use lookup plugins (they can read files from localhost), and you can pass filename as variables.
For really grandiose sets of data you can use include_vars.
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
Ansible is not really an interactive tool. You should avoid using patterns with user interaction.
Nevertheless you can pass everything you want in command line. The simplest way is to use -e option (it can be repeated few times if needed). It set variable to a specified value. F.e. ansible-playbook -i myinventory play.yaml -e "ssh_key=AAAA....". For more advanced things you can use lookup plugins (they can read files from localhost), and you can pass filename as variables.
For really grandiose sets of data you can use include_vars.
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
answered Jan 3 at 15:11
George ShuklinGeorge Shuklin
1,59951731
1,59951731
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54011522%2fusing-ansible-to-update-ssh-keys-for-groups-of-servers%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
