Ukusebenzisa iiplagi ze-inventri ezivela kwi-Ansible Content Collections kwi-Ansible Tower

Iimeko ze-IT ziya zisiba nzima ngakumbi. Kule miqathango, kubalulekile ukuba inkqubo ye-IT ye-automation ibe nolwazi oluhlaziyiweyo malunga nee-nodes ezikhoyo kwinethiwekhi kwaye zixhomekeke ekusebenzeni. Kwi-Red Hat Ansible Automation Platform, lo mbandela usonjululwa ngento ebizwa ngokuba yi-inventory (Lweencwadi) - uluhlu lweenodi ezilawulwayo.

Ngeyona ndlela ilula, uluhlu lwempahla yifayile engatshintshiyo. Oku kulungile xa uqala ukusebenza nge-Ansible, kodwa njengoko i-automation isanda, iba nganelanga.

Kungenxa yoko le nto:

1. Uhlaziya njani kwaye ulondoloze uluhlu olupheleleyo lweenodi ezibekwe esweni xa izinto zihlala zitshintsha, xa umthwalo wemisebenzi-kwaye emva koko ii-node eziqhuba kuzo-ziza zihambe?
2. Indlela yokuhlela amacandelo eziseko ze-IT ukwenzela ukuba ukhethe ngokukhethekileyo iindawo zokusebenzisa i-automation ethile?

I-inventri enamandla inika iimpendulo kuyo yomibini le mibuzo (uluhlu lwezinto ezikhoyo) - iskripthi okanye i-plugin efuna ii-nodes ukuba zenziwe ngokuzenzekelayo, zibhekiselele kumthombo wenyaniso. Ukongeza, uluhlu oluguquguqukayo luhlela ngokuzenzekelayo ii-nodes zibe ngamaqela ukuze ukwazi ukukhetha ngokuchanekileyo iinkqubo ekujoliswe kuzo zokwenza i-Ansible automation ethile.

Inventory plugins ukunika umsebenzisi okwaziyo ukufikelela kumaqonga angaphandle ukukhangela ngokuguquguqukayo iindawo ekujoliswe kuzo kwaye asebenzise la maqonga njengomthombo wenyaniso xa usenza uluhlu lwempahla. Uluhlu olusemgangathweni lwemithombo kwi-Ansible lubandakanya iiplatifomu zamafu AWS EC2, Google GCP kunye neMicrosoft Azure, kwaye kukho nezinye iiplagi ze-inventri ezininzi ze-Ansible.

I-Ansible Tower iza nenani le iiplagi zempahla, esebenza kanye ngaphandle kwebhokisi kwaye, ngaphezu kweeplatifomu zefu ezidweliswe ngasentla, zibonelela ngokudibanisa neVMware vCenter, i-Red Hat OpenStack Platform kunye ne-Red Hat Satellite. Kwezi plugins, kufuneka nje unikeze iziqinisekiso zokuxhuma kwiqonga ekujoliswe kulo, emva koko zingasetyenziswa njengomthombo wedatha ye-inventri kwi-Ansible Tower.

Ukongeza kwiiplagi eziqhelekileyo ezibandakanyiweyo kunye ne-Ansible Tower, kukho ezinye iiplagi ze-inventri ezixhaswa luluntu lwe-Ansible. Ngenguqu ukuya IiNgqokelela zoMxholo we-Red Hat ezi plugins zaqala ukufakwa kwiingqokelela ezihambelanayo.

Kule post, siya kuthatha umzekelo wokusebenza kunye ne-inventory plugin ye-ServiceNow, i-platform yolawulo lwenkonzo ye-IT eyaziwayo apho abathengi bahlala begcina ulwazi malunga nazo zonke izixhobo zabo kwi-CMDB. Ukongeza, i-CMDB inokuqulatha umxholo oluncedo kwi-automation, njengolwazi malunga nabanini beseva, amanqanaba eenkonzo (imveliso / engeyiyo imveliso), uhlaziyo olufakiweyo, kunye nokugcinwa kweefestile. I-plugin ye-inventory ye-Ansible inokusebenza kunye ne-ServiceNow CMDB kwaye iyinxalenye yokuqokelela yenkonzo Kwisango galaxy.ansible.com.

Uvimba weGit

Ukusebenzisa i-plugin ye-inventri evela kwingqokelela kwi-Ansible Tower, kufuneka imiselwe njengomthombo weprojekthi. KwiNqaba ye-Ansible, iprojekthi ludibaniso kunye nolunye uhlobo lwenkqubo yokulawula inguqulelo, njenge-git repository, enokusetyenziswa ukuvumelanisa kungekuphela nje iincwadi zokudlala ezizenzekelayo, kodwa kunye nezintlu kunye noluhlu lwe-inventri.

Indawo yethu yokugcina izinto ilula kakhulu:

├── collections
│   └── requirements.yml
└── servicenow.yml

Ifayile ye-servicenow.yml iqulethe iinkcukacha zoluhlu lwe-plugin. Kwimeko yethu, sikhankanya ngokulula itafile kwi-ServiceNow CMDB esifuna ukuyisebenzisa. Sikwaseta iindawo eziya kongezwa njengee-node variables, kunye nolwazi oluthile kumaqela esifuna ukuwenza.

$ cat servicenow.yml
plugin: servicenow.servicenow.now
table: cmdb_ci_linux_server
fields: [ip_address,fqdn,host_name,sys_class_name,name,os]
keyed_groups:
  - key: sn_sys_class_name | lower
	prefix: ''
	separator: ''
  - key: sn_os | lower
	prefix: ''
	separator: ''

Nceda uqaphele ukuba oku akuchazi umzekelo we-ServiceNow apho siya kuxhuma ngayo nayiphi na indlela, kwaye ayikhankanyi naziphi iziqinisekiso zoqhagamshelwano. Siza kuqwalasela konke oku kamva kwi-Ansible Tower.

Iingqokelela zefayile/requirements.yml efunekayo ukuze i-Ansible Tower ikhuphe ingqokelela efunekayo kwaye ngaloo ndlela ifumane iplagin ye-inventri efunekayo. Ngaphandle koko, kuya kufuneka sifake ngesandla kwaye sigcine le ngqokelela kuzo zonke iindawo zethu ze-Ansible Tower.

$ cat collections/requirements.yml
---
collections:

- name: servicenow.servicenow

Nje ukuba sityhale olu lungelelwaniso kulawulo loguqulelo, singenza iprojekthi kwi-Ansible Tower ebhekisa kwindawo yokugcina ehambelanayo. Umzekelo ongezantsi udibanisa i-Ansible Tower kwindawo yethu yokugcina i-github. Nika ingqalelo kwi-URL ye-SCM: ikuvumela ukuba ubhalise i-akhawunti ukuze uqhagamshele kwindawo yokugcina yangasese, kunye nokucacisa isebe elithile, ithegi okanye uzibophelele ukujonga.

Ukwenza iziqinisekiso zeServiceNow

Njengoko kukhankanyiwe, ulungelelwaniso kwindawo yethu yokugcina aluqulathanga ziqinisekiso zokuqhagamshela kwiServiceNow kwaye ayichazi umzekelo weServiceNow esiza kunxibelelana nawo. Ke ngoko, ukuseta le datha, siya kudala iziqinisekiso kwi-Ansible Tower. Ngoku ka ServiceNow inventory plugin documentation, kukho inani lemeko-bume eguquguqukayo esiza kucwangcisa ngayo iparameters zodibaniso, umzekelo, ngolu hlobo:

= username
    	The ServiceNow user account, it should have rights to read cmdb_ci_server (default), or table specified by SN_TABLE

    	set_via:
      	env:
      	- name: SN_USERNAME

Kulo mzekelo, ukuba i-SN_USERNAME imo eguquguqukayo isetyenzisiwe, i-plugin ye-inventri iya kuyisebenzisa njenge-akhawunti ukuqhagamshela kwi-ServiceNow.

Kukwafuneka sisete i-SN_INSTANCE kunye ne-SN_PASSWORD eguquguqukayo.

Nangona kunjalo, akukho ziqinisekiso zolu hlobo kwi-Ansible Tower apho unokuchaza le datha ye-ServiceNow. Kodwa i-Ansible Tower ivumela ukuba sichaze iintlobo zeziqinisekiso zesiko, unokufunda ngakumbi malunga nale nto kwinqaku "I-Ansible Tower Feature Spotlight: Iimpawu zesiko".

Kwimeko yethu, uqwalaselo lwegalelo lweziqinisekiso zesiko leServiceNow lijongeka ngolu hlobo:

fields:
  - id: SN_USERNAME
	type: string
	label: Username
  - id: SN_PASSWORD
	type: string
	label: Password
	secret: true
  - id: SN_INSTANCE
	type: string
	label: Snow Instance
required:
  - SN_USERNAME
  - SN_PASSWORD
  - SN_INSTANCE

Ezi ziqinisekiso ziya kubhengezwa njengezinto eziguquguqukayo zokusingqongileyo ezinegama elifanayo. Oku kuchazwe kuqwalaselo lwesitofu:

env:
  SN_INSTANCE: '{{ SN_INSTANCE }}'
  SN_PASSWORD: '{{ SN_PASSWORD }}'
  SN_USERNAME: '{{ SN_USERNAME }}'

Ke, sichazile uhlobo lwesiqinisekiso esiludingayo, ngoku singongeza iakhawunti yeServiceNow kwaye sisete umzekelo, igama lomsebenzisi kunye negama lokugqitha, ngolu hlobo:

Senza uluhlu lwempahla

Ke, ngoku sonke sikulungele ukwenza uluhlu lwempahla kwi-Ansible Tower. Masiyibize ngokuba yiNkonzoNgoku:

Emva kokudala uluhlu, sinokuqhoboshela umthombo wedatha kuyo. Apha sicacisa iprojekthi esiyenzileyo ngaphambili kwaye singenise indlela eya kwifayile yethu yoluhlu lwe-YAML kwindawo yolawulo lomthombo, kwimeko yethu yinkonzonow.yml kwingcambu yeprojekthi. Ukongeza, kufuneka udibanise iakhawunti yakho yeServiceNow.

Ukujonga ukuba yonke into isebenza njani, makhe sizame ukungqamanisa nomthombo wedatha ngokucofa iqhosha elithi “Sync all”. Ukuba yonke into iqwalaselwe ngokuchanekileyo, ke ii-nodes kufuneka zingeniswe kwi-inventory yethu:

Nceda uqaphele ukuba amaqela esiwafunayo nawo adalwe.

isiphelo

Kule post, sijonge indlela yokusebenzisa iiplagi ze-inventri ezivela kwiiqoqo kwi-Ansible Tower usebenzisa i-ServiceNow plugin njengomzekelo. Siphinde sabhalisa ngokukhuselekileyo iziqinisekiso zokuqhagamshela kumzekelo wethu weServiceNow. Ukudibanisa i-plugin ye-inventri esuka kwiprojekthi ayisebenzi kuphela kwiqela lesithathu okanye iiplagi eziqhelekileyo, kodwa zingasetyenziselwa ukuguqula indlela yokusebenza kwezinye izinto eziqhelekileyo. Oku kwenza i-Ansible Automation Platform ibe lula kwaye ingenamthungo ukudibanisa nezixhobo ezikhoyo xa kusenziwa ngokuzenzekelayo iimeko ze-IT eziya zisiba nzima.

Ungafumana ulwazi oluthe kratya kwizihloko ezixoxwe kule post, kunye neminye imiba yokusebenzisa i-Ansible, Apha:

• Ibhlog ngo I-Automating ServiceNow usebenzisa i-Ansible.
• Uyenza njani eyakho ingqokelela.
• Uluhlu lweengqokelela zeRed Hat ezixhaswayo kwiwebhusayithi ye-Automation Hub (cloud.redhat.com).
• Ii-eBooks ze-Ansible Automation Platform.

*I-Red Hat ayiqinisekisi ukuba ikhowudi equlethwe apha ichanekile. Zonke izixhobo zibonelelwa ngesiseko sokungangqinelani ngaphandle kokuba kuchazwe ngenye indlela.

umthombo: www.habr.com