AWS Ansible

Archives Ansible Project
1

Hi Ansiblers,
How can i use same playbook for multiple aws accounts, can i give the access key and secret key as command line paramters in playbook?

2

Any help?

3

Yes, you pass them as extra-vars, but there are many ways to do this, just watch out where you run your playbook and if AWS ENV variables are already set, as boto will take this into account also.
best to understand better the AWS credentials and profiles

http://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/credentials.html#credentials-default

4

Is there a way to store all accounts keys as some files and call them as extra vars in playbook?

5

Yes, you can use lookups, like this

- name: set authorized_keys
authorized_key: user={{ item }} exclusive=yes
key="{{ lookup('file', 'files/pubkeys/{{ item }}.key') }}"
with_items: "{{ team_members[team] }}"

team_members[team] here is a list of usernames,
the files live in rolename/files/pubkeys/$username.key

original role is here :
https://github.com/rasputnik/ansible-sshteams/blob/master/roles/teams/tasks/team.yml

6

Oh my god, my head is spinning. I have 3 accounts in AWS, i need to create a file for each account? and then i need to give that name in playbook?

i am expecting something like this

ansible-playbook newmachine.yml --extra-vars “account=myaccount” and i want the new ec2 instance to be spinned up in that account. how can i do this?

7

Sorry I thought you wanted to know about file lookups (in this case
it's ssh keys).

If the -e 'credentials=/path/to/credentials' , you just need to lookup
the file and
read it's contents. Or just set environment variables before you run
the playbook, I
thought the aws related modules read the environment fine.

8

Sorry, i dont really know where to start,
Should i save the keys in some file and refer that fiile in the playbook as a variable?

9

No, just keep it simple and set the environment variables; then you
can't accidentally
commit credentials to a repo or use the wrong account.

http://docs.ansible.com/ansible/guide_aws.html

10

i am new to ansible and i am struggling a bit here :frowning: how can i save multiple accounts credentials in ansible server and call them in command line?