houssoli / ansible-role-ansible-pull

Use Ansible in push mode to setup a remote machine to run Ansible Pull

Ansible Pull

Configure a remote machine to run ansible-pull on a schedule. ansible will be installed on the managed node in a virtual environment using pip.

Requirements

• cron
• logrotate

Role Variables

At a minimum, you need to define ansible_pull_repo where your Ansible playbook repository lives as well as the ansible_pull_playbook to run.

Name	Default Value	Description
ansible_pull_workdir	/var/lib/ansible/local	Directory where repository is cloned.
ansible_pull_repo	https://github.com/samdoran/demo-playbooks.git	Remote repository to clone when running ansible-pull.
ansible_pull_playbook	{{ ansible_pull_workdir }}/hello.yml	Playbook to run with ansible-pull.
ansible_pull_logfile	/var/log/ansible-pull.log	Where to log output from ansible-pull. Also gets rotated.
ansible_pull_vault_password_file	/root/.vault	File to hold Ansible vault key. Not recommonded unless you aware of the implications of storing keys in clear text on remote hosts, or you are using a script to get the secret from an external source.
ansible_pull_vault_password	SuperSecretKey	Vault key, in plain text, that will be inserted int ansible_pull_vault_password_file. Not recommonded unless you aware of the implications of storing keys in clear text on remote hosts, or you are using a script to get the secret from an external source.
ansible_pull_ssh_private_key	[see defaults/main.yml]	Optionally define an SSH private key that will be installed for root on the remote host. If this is not defined, a new key will be generated and the public SSH key will be output at the end of the play.
ansible_known_hosts	[]	List of SSH host keys to add to /root/.ssh/known_hosts.
ansible_pull_cron_jobs	[see defaults/main.yml]	Cron configuration for jobs that run ansible-pull. The default settings run ansible-pull every ten minutes.
ansible_pull_user	root	User that will run ansible-pull.
ansible_pull_pip_packages	['ansible']	List of Python packages to install in the virtual environment.

Dependencies

• samdoran.repo_epel

Example Playbook

Here is a playbook using an internal GitLab server with the pull.yml playbook. We also set the SSH key of the internal GitLab server to avoid any problems.

- name: Setup Ansible Pull
  hosts: all
  become: True

  vars:
    ansible_pull_playbook: "{{ ansible_pull_workdir }}/playbooks/pull.yml"
    ansible_pull_repo: "[email protected]/internal.git"
    ansible_pull_known_hosts:
      - name: "gitlab.acme.com"
        state: present
        key: "gitlab.acme.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCEPm0nPQBk+W4FBWSuI2wP0vO2W5cfDQV3B65WayiQPCh5kQIaTfDaRXIHACu9GcZRx5mhTsXYt+jY2egvLwazX5xvvQqDZX7wLw+qJXnpb1pqS7koINnAopGspp5v/+KPk7e3SRbLdNDk8O/g7uXb1PwaryebQM2+eluDebh1zbDd2QgKHf1/p4gZ66m4QJ9s17+Qzj3AJO+5fNr9z0MxPkYkf3jLvJ8PmAqGT+6AYlAh889yCrrC+yGj7VH/H6P3dEakj2xEx3Ib4g42EjKOpumoCVLY6dKrtSlkyOVBEOkf7G3liIV2ZNm6smWsJsnCTMPy4o9ioxF+x5GG1nsL"

  roles:
    - samdoran.repo_epel
    - samdoran.ansible_pull

License

Apache 2.0