docent-net / jlabs-academy-aws

Materials from my presentation during J-Labs Academy Devops/AWS 2015-01-12

jlabs-academy-aws

Materials from my presentation during J-Labs Academy Devops/AWS 2015-01-12

• ansible-deployer - Ansible playbook used to test all provisioned VMs
  • inventory - directory with inventory and variable files
  • plays - directory with playbooks
  • vault - directory with vault files
• libcloud_provisioner/provision.py - Python wrapper for libcloud that acts as simple EC2 provisioner

Cheatsheets

Create EC2 from AWS console

• Install Ansible: yum / apt-get install ansible
• configure your ~/.aws/{credentials,config} files
• create instance from AWS console (manually via GUI)
• edit inventory/prod and replace IP addr with the new one
• simply invoke ansible-playbook -i inventory/prod plays/deploy_ec2_nginx.yml --extra-vars="www_msg=manual-deploy"

Poke with AWS CLI

• Install AWS CLI: pip install aws-cli (preferably inside virtualenv)
• create security group:
  • aws ec2 create-security-group --group-name <group_name> --description test --region eu-central-1 --vpc-id <vpc_id>
  • aws ec2 authorize-security-group-ingress --group-id <group_id> --protocol tcp --port 22 --cidr 0.0.0.0/0 --region eu-central-1
• provision VM:
  • aws ec2 --output json --profile <aws_config_profile> --region eu-central-1 run-instances --image-id <ami_id> --instance-type t2.micro --security-groups <group_name> --key-name <key_name>
  • wait till it's deployed: aws --profile <aws_config_profile> ec2 describe-instances --filters "Name=instance-state-name,Values=running,pending"
  • get IP addr: aws --profile <aws_config_profile> ec2 describe-instances --filters "Name=instance-state-name,Values=running,pending" | grep PublicIp
• edit inventory/prod and replace IP addr with the new one
• run Ansible Nginx installer:
  • ansible-playbook -i inventory/prod plays/deploy_ec2_nginx.yml --extra-vars="www_msg=awscli-deploy"
• Simply curl <PublicIp>

Poke with AWS SHELL

• Just same as above but within aws-shell. Remember to choose correct aws-profile with .profile dot command

Boto

• Install boto: pip install boto (preferably inside virtualenv)
• Remember to configure your ~/.boto file
• Code goes like this:

import boto.ec2

conn = boto.ec2.connect_to_region('eu-central-1',profile_name='<your_profile>')
conn.create_security_group(name='web-x',description='test',vpc_id='<your_vpc_id>')
# conn.get_all_security_groups()
# print conn.authorize_security_group.__doc__
# sg = conn.get_all_security_groups()[0]
# conn.authorize_security_group(group_name='web-x',ip_protocol='tcp',from_port=22,to_port=22,cidr_ip='0.0.0.0/0')
# conn.revoke_security_group(group_name='web-x',ip_protocol='tcp',from_port=22,to_port=22,cidr_ip='0.0.0.0/0')
for _port in [22,80,443]: conn.authorize_security_group(group_name='web-x',ip_protocol='tcp',from_port=_port,to_port=_port,cidr_ip='0.0.0.0/0')

conn.run_instances( image_id='<your_ami>', 
                    key_name='<your_key-name>', 
                    security_groups=['web-x'], 
                    instance_type='t2.micro'
                    )

• edit inventory/prod and replace IP addr with the new one
• run Ansible Nginx installer:
  • ansible-playbook -i inventory/prod plays/deploy_ec2_nginx.yml --extra-vars="www_msg=awscli-deploy"
• Simply curl <PublicIp>

Ansible

• Remember to configure your AWS credentials:
  • copy ansible_deployer/vault/vault.yml.j2 to ansible_deployer/vault/vault.yml
  • enter correct credentials in ansible_deployer/vault/vault.yml
  • create text file containing your secret password outside of the repository: echo "very|secret|password" > ~/.passwords/vault.pass
  • encrypt vault file: `ansible-vault encrypt --vault-password-file ~/.passwords/vault.pass ansible_deployer/vault/vault.yml**
• Run playbook: `ansible-playbook -i inventory plays/provision_and_deploy_ec2_nginx.yml --vault-password-file ~/.passwords/vault.pass --extra-vars="www_msg=ansible-deploy"
• Simply curl <PublicIp>

apache-libcloud

• Install apache-libcloud: pip install apache-libcloud (preferably inside virtualenv)
• Just run: python libcloud_provisioner/provision.py
• edit inventory/prod and replace IP addr with the new one
• run Ansible Nginx installer:
  • ansible-playbook -i inventory/prod plays/deploy_ec2_nginx.yml --extra-vars="www_msg=awscli-deploy"
• Simply curl <PublicIp>