Ansible azure module 測試小記 - azure_rm_virtualmachine
OS: openSUSE Leap 42.3 in Azure
測試模組
azure_rm_publicipaddress
azure_rm_virtualmachine
執行登入 ( 如果還沒有裝 az 指令就請參考文章安裝 )
# az login
To sign in, use a web browser to open the page https://aka.ms/devicelogin and enter the code XXXXXXX to authenticate.
測試一下指令
# az vm list --output table
Name ResourceGroup Location
------------ --------------- ----------
test20180214 SAKANATEST eastus
之前因為是測試, 所以建立完驗證之後, 我就會立馬刪除驗證, 接下來就動手再建立一個
還沒有建立驗證機制前, 先觀察一下
# az ad sp list --output table | grep azure-cli
建立驗證相關資料
# az ad sp create-for-rbac --query '{"client_id": appId, "secret": password, "tenant": tenant}'
{
"client_id": "33a44043-xxxx-xxxx-xxxx-663eee4fd112",
"secret": "27dd256a-xxxx-xxxx-xxxx-b28128f641f9",
"tenant": "4cd326d7-xxxx-xxxx-xxxx-df56dc9dabd4"
}
建立完成之後觀察, 這個時候會有一筆 azure-cli-時間的授權
# az ad sp list --output table | grep azure-cli
33a44043-xxxx-xxxx-xxxx-663eee4fd112 azure-cli-2018-02-14-06-03-46 0c2d4a46-xxxx-xxxx-xxxx-8b71baf02fb7 ServicePrincipal
接下來還要有 subscription_id
使用 az account 指令取得
$ az account show --query "{ subscription_id: id }"
{
"subscription_id": "6a2bdf3b-XXXX-XXXX-XXXX-3371d3401feb"
}
建立 存放認証的目錄( 如果沒有的話 )
# mkdir ~/.azure
使用剛剛的資料建立認証的檔案
# vi ~/.azure/credentials
[default]
subscription_id=6a2bdf3b-XXXX-XXXX-XXXX-3371d3401feb
client_id=d06f8905-XXXX-XXXX-XXXX-3e0bcf22a853
secret=b7f0df5b-XXXX-XXXX-XXXX-8aaca284f706
tenant=4cd326d7-XXXX-XXXX-XXXX-df56dc9dabd4
建立好了就可以開始測試了
==== 測試 Module name: azure_rm_publicipaddress ====
目標要從 sakanatest 這個資源群組, 建立一個 mypublic_ip 的固定 IP
先以單一指令的方式來實施吧
# ansible localhost -m azure_rm_publicipaddress -a 'resource_group=sakanatest name=mypublic_ip allocation_method=Static'
這邊出現錯誤訊息在 openSUSE Leap in Azure
Using /etc/ansible/ansible.cfg as config file
[WARNING]: Could not match supplied host pattern, ignoring: all
[WARNING]: provided hosts list is empty, only localhost is available
localhost | FAILED! => {
"changed": false,
"failed": true,
"msg": "Do you have msrestazure installed? Try `pip install msrestazure`- No module named msrest.serialization"
}
但是 Cloud-Shell 那邊沒有問題 …… Orz
==== 以下操作是在 cloud-shell 的終端機 ====
# ansible localhost -m azure_rm_publicipaddress -a 'resource_group=sakanatest name=mypublic_ip allocation_method=Static'
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: Could not match supplied host pattern, ignoring: all
[WARNING]: provided hosts list is empty, only localhost is available
localhost | SUCCESS => {
"changed": true,
"state": {
"dns_settings": {},
"etag": "W/\"ff593fe3-XXXX-XXXX-XXXX-a3eb90006d47\"",
"idle_timeout_in_minutes": 4,
"ip_address": "213.192.72.82",
"location": "eastus",
"name": "mypublic_ip",
"provisioning_state": "Succeeded",
"public_ip_allocation_method": "Static",
"tags": null,
"type": "Microsoft.Network/publicIPAddresses"
}
}
可以到 Azure Portal 上面確認 :)
接下來測試移除這個 IP
# ansible localhost -m azure_rm_publicipaddress -a 'resource_group=sakanatest name=mypublic_ip state=absent'
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: Could not match supplied host pattern, ignoring: all
[WARNING]: provided hosts list is empty, only localhost is available
localhost | SUCCESS => {
"changed": true,
"state": {
"status": "Deleted"
}
}
接下來嘗試除了靜態 IP 之外還指定 FQDN
$ ansible localhost -m azure_rm_publicipaddress -a 'resource_group=sakanatest name=mypublic_ip domain_name_label=sakana allocation_method=Static'
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: Could not match supplied host pattern, ignoring: all
[WARNING]: provided hosts list is empty, only localhost is available
localhost | SUCCESS => {
"changed": true,
"state": {
"dns_settings": {
"domain_name_label": "sakana",
"fqdn": "sakana.eastus.cloudapp.azure.com",
"reverse_fqdn": null
},
"etag": "W/\"a0f0b9ec-XXXX-XXXX-XXXX-1a040d22b080\"",
"idle_timeout_in_minutes": 4,
"ip_address": "52.234.150.39",
"location": "eastus",
"name": "mypublic_ip",
"provisioning_state": "Succeeded",
"public_ip_allocation_method": "Static",
"tags": null,
"type": "Microsoft.Network/publicIPAddresses"
}
}
這個部份也沒有問題
接下來實驗動態 IP, 這邊發現一個有趣的現象, 即使是動態 IP, 在 Azure 上面也可以設定 FQDN, 在該IP 沒有被使用的時候, 微軟的 DNS 會回應 255.255.255.255 :)
$ ansible localhost -m azure_rm_publicipaddress -a 'resource_group=sakanatest name=mypublic_ip domain_name_label=sakana allocation_method=Dynamic'
[WARNING]: Unable to parse /etc/ansible/hosts as an inventory source
[WARNING]: No inventory was …
