Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Ukukhutshwa okuzayo kwe-Red Hat Ansible Engine 2.9 kuzisa uphuculo olumnandi, ezinye zazo zixutyushwa kweli nqaku. Njengesiqhelo, besiphuhlisa ukuphuculwa kweAnsible Network ngokuvulelekileyo, ngenkxaso yoluntu. Sijoyine - jonga ibhodi yokukhupha kwiGitHub kunye nokufunda isicwangciso sophuhliso ukukhululwa kwe-Red Hat Ansible Engine 2.9 kwiphepha le-wiki ye Inethiwekhi esebenzayo.

Njengoko besisazisile mva nje, Iplatifomu yoHlolo oluBonakalayo oluBomvu ngoku iquka i-Ansible Tower, i-Ansible Engine kunye nayo yonke imixholo ye-Ansible Network. Kule mihla, uninzi lwamaqonga enethiwekhi adumileyo aphunyezwa ngeemodyuli zeAnsible. Umzekelo:

  • Arista EOS
  • Cisco IOS
  • Cisco IOS XR
  • Cisco NX-OS
  • Umjunipha uJunos
  • VyOS

Uluhlu olupheleleyo lwamaqonga axhaswa ngokupheleleyo yiRed Hat ngokubhaliswa kwe-Ansible Automation, ipapashwe apha.

Sifunde ntoni

Kule minyaka mine idlulileyo, sifunde okuninzi malunga nokuphuhlisa iqonga le-automation yenethiwekhi. Kwakhona safunda oko njani izixhobo zeqonga zisetyenziswa kwiincwadi zokudlala eziAnsible kunye neendima ngabasebenzisi bokugqibela. Nantsi into esiyifumeneyo:

  • Imibutho zizixhobo ezizenzekelayo ezisuka hayi nje enye, kodwa kubathengisi abaninzi.
  • I-Automation ayiyona nje into yobugcisa, kodwa kunye nenkcubeko.
  • Uthungelwano oluzenzekelayo kwisikali lunzima kakhulu kunokuba lubonakala ngenxa yemithetho-siseko esisiseko yoyilo loyilo oluzenzekelayo.

Xa besixoxa ngezicwangciso zethu zokukhula kwexesha elide kunyaka ophelileyo, abathengi bethu abamanyanisiweyo bacele oku kulandelayo:

  • Ukuqokelelwa kweenyani kufuneka kubekwe emgangathweni ngcono kwaye kulungelelaniswe nokuhamba komsebenzi okuzenzekelayo kuzo zonke izixhobo.
  • Ukuhlaziya ulungelelwaniso kwisixhobo nako kufuneka kubekwe emgangathweni kwaye kungqinelane ukwenzela ukuba iimodyuli eziAnsible zibambe isiqingatha sesibini somjikelo emva kokuqokelela iinyani.
  • Sifuna iindlela ezingqongqo nezixhaswayo zokuguqula ubumbeko lwesixhobo sibe yidatha ecwangcisiweyo. Ngesi siseko, umthombo wenyaniso unokususwa kwisixhobo sothungelwano.

Uphuculo lwenyaniso

Ukuqokelela iinyani kwizixhobo zenethiwekhi usebenzisa i-Ansible kaninzi kwenzeka ngokungalindelekanga. Iiplatifti ezisekelwe kwiwebhu zinemigangatho eyahluka-hlukeneyo yobuchule bokuqokelela iinyani, kodwa zinomsebenzi omncinci okanye azinamsebenzi wokwahlulahlula kunye nokulinganisa ukumelwa kwedatha kwizibini eziphambili zexabiso. Funda iposti Ken Celenza malunga nokuba kunzima kwaye kubuhlungu kangakanani ukuhlalutya kunye nokulinganisa idatha eyinyani.

Usenokuba usiqaphele ukuba sisebenza kwi-Ansible Network Engine indima. Ngokwendalo, ukukhutshelwa kwe-24K kamva, indima yeNjini yeNethiwekhi ikhawuleze yaba yenye yezona ndima zidumileyo kwi-Ansible Galaxy yeemeko ze-automation yenethiwekhi. Ngaphambi kokuba sihambise kakhulu oku kwi-Ansible 2.8 ukulungiselela oko kuya kufuneka kwi-Ansible 2.9, le ndima ye-Ansible ibonelele ngeseti yokuqala yezixhobo zokunceda ukucazulula imiyalelo, ukulawula imiyalelo, kunye nokuqokelela idatha yezixhobo zenethiwekhi.

Ukuba uyayazi indlela yokusebenzisa Injini yeNethiwekhi, le yindlela esebenza kakuhle kakhulu yokuqokelela, ukucazulula, kunye nokubeka emgangathweni idatha yenyani ukuze isetyenziswe kwi-Ansible. Ububi bale ndima kukuba kufuneka wenze iqela elipheleleyo labacazululi kwiqonga ngalinye nakuwo wonke umsebenzi womnatha. Ukuqonda ukuba kunzima kangakanani ukwenza, ukuthumela, kunye nokugcina abacaluli, jonga Ngaphezulu kwe-1200 abahlalutyi kubafana baseCisco.

Ngamafutshane, ukufumana iinyani kwizixhobo kunye nokuziqhelanisa zibe ngababini bexabiso eliphambili kubalulekile kwi-automation esikalini, kodwa ukufezekisa oku kunzima xa unabathengisi abaninzi kunye namaqonga enethiwekhi.

Imodyuli nganye yenethiwekhi yenyani kwi-Ansible 2.9 ngoku inokuhlalutya ukucwangciswa kwesixhobo sothungelwano kunye nokubuyisela idatha ecwangcisiweyo - ngaphandle kweelayibrari ezongezelelweyo, iindima ezithintekayo okanye abahlalutyi bamasiko.

Ekubeni i-Ansible 2.9, ixesha ngalinye imodyuli yenethiwekhi ehlaziyiweyo ikhutshwa, imodyuli yenyani iphuculwe ukubonelela ngedatha malunga neli candelo loqwalaselo. Okokuthi, ukuphuhliswa kweenyaniso kunye neemodyuli ngoku kwenzeka ngesantya esifanayo, kwaye baya kuhlala benesakhiwo sedatha eqhelekileyo.

Ukucwangciswa kwezibonelelo kwisixhobo sothungelwano kunokufunyanwa kwakhona kwaye kuguqulelwe kwidatha ecwangcisiweyo ngeendlela ezimbini. Kuzo zombini iindlela, unokuqokelela kwaye uguqule uluhlu oluthile lwezixhobo usebenzisa igama elingundoqo elitsha gather_network_resources. Amagama oovimba ahambelana namagama emodyuli, eluncedo kakhulu.

Ngelixa uqokelela iinyani:

Ukusebenzisa igama elingundoqo gather_facts unokufumana kwakhona ubumbeko besixhobo sangoku ekuqaleni kwencwadi yokudlala, kwaye uyisebenzise kuyo yonke incwadi yokudlala. Chaza izibonelelo zomntu ngamnye eziza kufunyanwa kwisixhobo.

- hosts: arista
  module_defaults:
    eos_facts:
      gather_subset: min
      gather_network_resources:
      - interfaces
  gather_facts: True

Usenokuba uqaphele into entsha kule mizekelo, eyile - gather_facts: true ngoku iyafumaneka kuqokelelo lwenyani lwendalo lwezixhobo zomsebenzi womnatha.

Ukusebenzisa imodyuli yeenyani zenethiwekhi ngokuthe ngqo:

- name: collect interface configuration facts
  eos_facts:
    gather_subset: min
    gather_network_resources:
    - interfaces

Incwadi yokudlala ibuyisela ezi nyaniso zilandelayo malunga nojongano:

ansible_facts:
   ansible_network_resources:
      interfaces:
      - enabled: true
        name: Ethernet1
        mtu: '1476'
      - enabled: true
        name: Loopback0
      - enabled: true
        name: Loopback1
      - enabled: true
        mtu: '1476'
        name: Tunnel0
      - enabled: true
        name: Ethernet1
      - enabled: true
        name: Tunnel1
      - enabled: true
        name: Ethernet1

Qaphela ukuba i-Ansible ibuyisela njani ukucwangciswa kwendabuko kwisixhobo se-Arista kwaye iyiguqule ibe yidatha ecwangcisiweyo ukuze isetyenziswe njengemigangatho yexabiso eliphambili lexabiso lemisebenzi esezantsi kunye nokusebenza.

Iinyaniso zojongano zingongezwa kwizinto eziguquguqukayo ezigciniweyo kwaye zisetyenziswe ngokukhawuleza okanye kamva njengegalelo kwimodyuli yesixhobo eos_interfaces ngaphandle kokuqhubela phambili okanye uguqulo olongezelelweyo.

Iimodyuli zeZibonelelo

Ke, sikhuphe iinyani, sayitshintsha idatha, sayidibanisa kwidayagram yesakhiwo sedatha esemgangathweni kwaye safumana umthombo wenyaniso osele ulungile. Uxolo! Oku kuhle, kunjalo, kodwa kusafuneka ngandlela ithile siguqule izibini zexabiso elingundoqo sibuyele kuqwalaselo oluthile olulindelwe liqonga lesixhobo esithile. Ngoku sidinga iimodyuli ezithe ngqo zeqonga ukuze sihlangabezane nezi mfuno zintsha zokuqokelelwa kwenyani kunye nokuqheleka.

Yintoni imodyuli yomthombo? Unokucinga ngamacandelo oqwalaselo lwesixhobo njengezixhobo ezibonelelwe sesi sixhobo. Iimodyuli zemithombo yothungelwano zilinganiselwe ngabom kwisixhobo esinye kwaye zinokubekwa njengeebhloko zokwakha ukuqwalasela iinkonzo zenethiwekhi ezinzima. Ngenxa yoko, iimfuno kunye nokucaciswa kwemodyuli yesixhobo zenziwe lula ngokwemvelo, kuba imodyuli yomthombo inokufunda. ΠΈ misela inkonzo ethile yenethiwekhi kwisixhobo sothungelwano.

Ukucacisa okwenziwa yimodyuli yesixhobo, makhe sijonge kumzekelo wencwadi yokudlala ebonisa ukusebenza okuziintloko kusetyenziswa iinyani zemithombo yenethiwekhi entsha kunye nemodyuli. eos_l3_interface.

- name: example of facts being pushed right back to device.
  hosts: arista
  gather_facts: false
  tasks:
  - name: grab arista eos facts
    eos_facts:
      gather_subset: min
      gather_network_resources: l3_interfaces

  - name: ensure that the IP address information is accurate
    eos_l3_interfaces:
      config: "{{ ansible_network_resources['l3_interfaces'] }}"
      register: result

  - name: ensure config did not change
    assert:
      that: not result.changed

Njengoko ubona, idatha eqokelelwe kwisixhobo idluliselwa ngokuthe ngqo kwimodyuli yomthombo ohambelanayo ngaphandle kokuguqulwa. Xa yaziswa, incwadi yokudlala ifumana amaxabiso kwisixhobo kwaye iwathelekise namaxabiso alindelekileyo. Kulo mzekelo, amaxabiso abuyisiweyo anjengoko kulindelekile (oko kukuthi, ijonga ukutenxa koqwalaselo) kwaye inika ingxelo ukuba uqwalaselo lutshintshile.

Eyona ndlela ilungileyo yokubona uqwalaselo lwe-drift kukugcina iinyani kwi-Ansible egciniweyo eguquguqukayo kwaye ngamaxesha athile uzisebenzise kunye nemodyuli yesixhobo kwindlela yokuhlola. Le yindlela elula yokubona ukuba umntu utshintshe amaxabiso ngesandla. Kwiimeko ezininzi, imibutho ivumela utshintsho kunye nokucwangciswa ngesandla, nangona imisebenzi emininzi yenziwa nge-Ansible Automation.

Zahluke njani iimodyuli zemithombo entsha kwezo zangaphambili?

Kwinjineli ye-automation yenethiwekhi, kukho i-3 eyona nto ibalulekileyo phakathi kweemodyuli zezibonelelo kwi-Ansible 2.9 kunye neenguqulelo zangaphambili.

1) Kwisixhobo sothungelwano esinikiweyo (esinokuthi sicingelwe njengecandelo loqwalaselo), iimodyuli kunye neenyani ziya kuguquka kuzo zonke iinkqubo zokusebenza zenethiwekhi ezixhaswayo ngaxeshanye. Sicinga ukuba ukuba i-Ansible ixhasa ukucwangciswa kwezixhobo kwiqonga lenethiwekhi enye, kufuneka siyixhase yonke indawo. Oku kwenza lula ukusetyenziswa kweemodyuli zezibonelelo kuba injineli ye-automation yenethiwekhi ngoku ingaqwalasela isibonelelo (esifana ne-LLDP) kuzo zonke iinkqubo zokusebenza zenethiwekhi ezineemodyuli zomthonyama kunye nezixhaswayo.

2) Iimodyuli zezibonelelo ngoku ziquka ixabiso likarhulumente.

  • merged: uqwalaselo ludityaniswe noqwalaselo olunikiweyo (oluhlala lukhona);
  • replaced: Ubumbeko besixhobo siza kutshintshwa ngolungelelwaniso olunikiweyo;
  • overridden: Ubumbeko besixhobo siza kutshintshwa ngolungelelwaniso olunikiweyo; iimeko zezibonelelo ezingeyomfuneko ziya kucinywa;
  • deleted: Ubumbeko lwesixhobo luya kucinywa/bubuyiselwe kwindalo.

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

3) Iimodyuli zezibonelelo ngoku ziquka amaxabiso okubuya azinzileyo. Xa imodyuli yesixhobo sothungelwano yenze (okanye indulule) utshintsho oluyimfuneko kwisixhobo sothungelwano, ibuyisela izibini ezingundoqo zexabiso elifanayo kwincwadi yokudlala.

  • before: uqwalaselo kwisixhobo ngendlela yedatha eyakhiwe phambi komsebenzi;
  • after: ukuba isixhobo sitshintshile (okanye sinokutshintsha ukuba imo yovavanyo isetyenzisiwe), uqwalaselo oluphumayo luya kubuyiselwa njengedatha eyakhiweyo;
  • commands: Nayiphi na imiyalelo yoqwalaselo isebenza kwisixhobo ukuyizisa kwimeko efunekayo.

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Kuthetha ukuthini konke oku? Kutheni ibalulekile nje?

Esi sithuba sigubungela iikhonsepthi ezininzi ezintsonkothileyo, kodwa sinethemba lokuba ekugqibeleni uya kuba nokuqonda ngcono ukuba yintoni na abathengi beshishini abayifunayo enyanisweni ukuqokelelwa, ukuqheleka kwedatha, kunye nokucwangciswa kwe-loop yeqonga elizenzekelayo. Kodwa kutheni belufuna olu phuculo? Imibutho emininzi ngoku ilandela inguqu yedijithali ukwenza iindawo zabo ze-IT zibe lula kwaye zikhuphisane. Kungcono okanye kubi, iinjineli ezininzi zothungelwano ziba ngabaphuhlisi bothungelwano nokuba kungenxa yomdla wobuqu okanye ngokomyalelo wolawulo.

Imibutho iyaqaphela ukuba ukuzenzekelayo iitemplates zenethiwekhi nganye akuzisombululi ingxaki ye-silos kwaye kwandisa kuphela ukusebenza kakuhle kwinqanaba elithile. I-Red Hat Ansible Automation Platform ibonelela ngeemodeli zedatha yemithombo engqongqo kunye neqhelekileyo ukulawula ngokwenkqubo idatha esisiseko kwisixhobo sothungelwano. Oko kukuthi, abasebenzisi ngokuthe ngcembe bazishiya iindlela zoqwalaselo ngokuthanda iindlela zale mihla ngogxininiso kubuchwephesha (umzekelo, iidilesi ze-IP, ii-VLAN, i-LLDP, njl. njl.), endaweni yokuphunyezwa komthengisi othile.

Ngaba oku kuthetha ukuba iintsuku zeemodyuli ezithembekileyo nezingqiniweyo zomyalelo kunye noqwalaselo zibaliwe? Akukho meko. Iimodyuli ezilindelekileyo zemithombo yenethiwekhi aziyi kusebenza kuzo zonke iimeko okanye kumthengisi ngamnye, ngoko umyalelo kunye neemodyuli zoqwalaselo zisazofuneka ziinjineli zenethiwekhi ukwenzela ukuphunyezwa okuthile. Injongo yeemodyuli zemithombo kukwenza lula itemplates ezinkulu zeJinja kunye nokulungelelanisa ulungelelwaniso lwesixhobo esingacwangciswanga kwifomathi eyakhiweyo ye-JSON. Ngeemodyuli zezibonelelo, kuya kuba lula kuthungelwano olukhoyo ukuguqula uqwalaselo lwazo lube ngamaqela abalulekileyo acwangcisiweyo abonisa umthombo wenyaniso ofundeka lula. Ngokusebenzisa i-structured key-value pairs, unokusuka ekuqhubeni ulungelelwaniso kwisixhobo ngasinye ukuze usebenze neenkcukacha ezizimeleyo ezicwangcisiweyo kwaye uzise uthungelwano kwindawo ephambili yesiseko-njengekhowudi.

Zeziphi iimodyuli zezixhobo eziza kuza kwi-Ansible Engine 2.9?

Phambi kokuba sikuxelele ngokweenkcukacha ukuba kuya kwenzeka ntoni na kwi-Ansible 2.9, masikhumbule ukuba sahlulahlula njani na wonke umda womsebenzi.

Sichonge iindidi ezisi-7 saza sanikezela ngezixhobo ezithile zothungelwano kwindawo nganye:

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Qaphela: Izibonelelo ezibhalwe ngqindilili zacwangciswa zaze zaphunyezwa kwi-Ansible 2.9.
Ngokusekwe kwingxelo evela kubathengi beshishini kunye noluntu, bekusengqiqweni ukuqala ukujongana nezo modyuli ezinxulumene ne-topology protocol, i-virtualization, kunye nojongano.
Iimodyuli ezilandelayo zemithombo zaphuhliswa liqela leNethiwekhi ye-Ansible kwaye zihambelana namaqonga axhaswa yiRed Hat:

Incwadi Yokudlala Ngaphakathi. Iimpawu zothungelwano kwi-injini entsha ye-Ansible 2.9

Ezi modyuli zilandelayo ziphuhliswa luluntu lwe-Ansible:

  • exos_lldp_global - ukusuka kwi-Extreme Networks.
  • nxos_bfd_interfaces - ukusuka Cisco
  • nxos_telemetry - ukusuka Cisco

Njengoko ubona, ingqikelelo yeemodyuli zemithombo ingena kwisicwangciso sethu seqonga. Oko kukuthi, sibandakanya izakhono eziyimfuneko kunye nemisebenzi kwi-Ansible ngokwayo ukuxhasa umgangatho ekuphuhlisweni kweemodyuli zenethiwekhi, kunye nokwenza lula umsebenzi wabasebenzisi kwinqanaba leendima ze-Ansible kunye neencwadi zokudlala. Ukwandisa uphuhliso lweemodyuli zezibonelelo, iqela le-Ansible likhuphe isixhobo soMakhi weModyuli.

Izicwangciso ze-Ansible 2.10 nangaphaya

Emva kokuba i-Ansible 2.9 ikhululiwe, siya kusebenza kwiseti elandelayo yeemodyuli zemithombo ye-Ansible 2.10, engasetyenziselwa ukuqwalasela ngakumbi i-network topology kunye nomgaqo-nkqubo, umz. ACL, OSPF kunye BGP. Isicwangciso sophuhliso sisenokulungiswa, ngoko ke ukuba unezimvo, nceda uxele Ansible Network uluntu.

Izibonelelo kunye nokuqalisa

Ukukhutshwa kweendaba malunga ne-Ansible Automation Platform
IBlog yePlatifomu yokuZisebenzela
Ikamva lokuhanjiswa komxholo kwi-Ansible
Iingcamango zokutshintsha iAnsible project structure

umthombo: www.habr.com

Yongeza izimvo