b1d78a61fc
TODO: * password prompting needs to be implemented, but is being worked on as part of the become privilege escalation changes
148 lines
6.1 KiB
Python
Executable file
148 lines
6.1 KiB
Python
Executable file
#!/usr/bin/env python
|
|
|
|
import os
|
|
import stat
|
|
import sys
|
|
|
|
from ansible import constants as C
|
|
from ansible.errors import AnsibleError
|
|
from ansible.executor.playbook_executor import PlaybookExecutor
|
|
from ansible.inventory import Inventory
|
|
from ansible.parsing import DataLoader
|
|
from ansible.parsing.splitter import parse_kv
|
|
from ansible.playbook import Playbook
|
|
from ansible.playbook.task import Task
|
|
from ansible.utils.cli import base_parser
|
|
from ansible.utils.unicode import to_unicode
|
|
from ansible.utils.vars import combine_vars
|
|
from ansible.utils.vault import read_vault_file
|
|
from ansible.vars import VariableManager
|
|
|
|
# Implement an ansible.utils.warning() function later
|
|
warning = getattr(__builtins__, 'print')
|
|
|
|
#---------------------------------------------------------------------------------------------------
|
|
|
|
def main(args):
|
|
''' run ansible-playbook operations '''
|
|
|
|
# create parser for CLI options
|
|
parser = base_parser(
|
|
usage = "%prog playbook.yml",
|
|
connect_opts=True,
|
|
runas_opts=True,
|
|
subset_opts=True,
|
|
check_opts=True,
|
|
diff_opts=True
|
|
)
|
|
parser.add_option('--vault-password', dest="vault_password",
|
|
help="password for vault encrypted files")
|
|
parser.add_option('-e', '--extra-vars', dest="extra_vars", action="append",
|
|
help="set additional variables as key=value or YAML/JSON", default=[])
|
|
parser.add_option('-t', '--tags', dest='tags', default='all',
|
|
help="only run plays and tasks tagged with these values")
|
|
parser.add_option('--skip-tags', dest='skip_tags',
|
|
help="only run plays and tasks whose tags do not match these values")
|
|
parser.add_option('--syntax-check', dest='syntax', action='store_true',
|
|
help="perform a syntax check on the playbook, but do not execute it")
|
|
parser.add_option('--list-tasks', dest='listtasks', action='store_true',
|
|
help="list all tasks that would be executed")
|
|
parser.add_option('--step', dest='step', action='store_true',
|
|
help="one-step-at-a-time: confirm each task before running")
|
|
parser.add_option('--start-at-task', dest='start_at',
|
|
help="start the playbook at the task matching this name")
|
|
parser.add_option('--force-handlers', dest='force_handlers', action='store_true',
|
|
help="run handlers even if a task fails")
|
|
parser.add_option('--flush-cache', dest='flush_cache', action='store_true',
|
|
help="clear the fact cache")
|
|
|
|
options, args = parser.parse_args(args)
|
|
|
|
if len(args) == 0:
|
|
parser.print_help(file=sys.stderr)
|
|
return 1
|
|
|
|
vault_pass = None
|
|
if options.ask_vault_pass:
|
|
# FIXME: prompt here
|
|
pass
|
|
elif options.vault_password_file:
|
|
# read vault_pass from a file
|
|
vault_pass = read_vault_file(options.vault_password_file)
|
|
|
|
loader = DataLoader(vault_password=vault_pass)
|
|
|
|
extra_vars = {}
|
|
for extra_vars_opt in options.extra_vars:
|
|
extra_vars_opt = to_unicode(extra_vars_opt, errors='strict')
|
|
if extra_vars_opt.startswith(u"@"):
|
|
# Argument is a YAML file (JSON is a subset of YAML)
|
|
data = loader.load_from_file(extra_vars_opt[1:])
|
|
elif extra_vars_opt and extra_vars_opt[0] in u'[{':
|
|
# Arguments as YAML
|
|
data = loader.load(extra_vars_opt)
|
|
else:
|
|
# Arguments as Key-value
|
|
data = parse_kv(extra_vars_opt)
|
|
extra_vars = combine_vars(extra_vars, data)
|
|
|
|
# FIXME: this should be moved inside the playbook executor code
|
|
only_tags = options.tags.split(",")
|
|
skip_tags = options.skip_tags
|
|
if options.skip_tags is not None:
|
|
skip_tags = options.skip_tags.split(",")
|
|
|
|
# initial error check, to make sure all specified playbooks are accessible
|
|
# before we start running anything through the playbook executor
|
|
for playbook in args:
|
|
if not os.path.exists(playbook):
|
|
raise AnsibleError("the playbook: %s could not be found" % playbook)
|
|
if not (os.path.isfile(playbook) or stat.S_ISFIFO(os.stat(playbook).st_mode)):
|
|
raise AnsibleError("the playbook: %s does not appear to be a file" % playbook)
|
|
|
|
# create the variable manager, which will be shared throughout
|
|
# the code, ensuring a consistent view of global variables
|
|
variable_manager = VariableManager()
|
|
variable_manager.set_extra_vars(extra_vars)
|
|
|
|
# create the inventory, and filter it based on the subset specified (if any)
|
|
inventory = Inventory(loader=loader, variable_manager=variable_manager, host_list=options.inventory)
|
|
variable_manager.set_inventory(inventory)
|
|
|
|
# Note: slightly wrong, this is written so that implicit localhost
|
|
# (which is not returned in list_hosts()) is taken into account for
|
|
# warning if inventory is empty. But it can't be taken into account for
|
|
# checking if limit doesn't match any hosts. Instead we don't worry about
|
|
# limit if only implicit localhost was in inventory to start with.
|
|
#
|
|
# Fix this when we rewrite inventory by making localhost a real host (and thus show up in list_hosts())
|
|
no_hosts = False
|
|
if len(inventory.list_hosts()) == 0:
|
|
# Empty inventory
|
|
warning("provided hosts list is empty, only localhost is available")
|
|
no_hosts = True
|
|
inventory.subset(options.subset)
|
|
if len(inventory.list_hosts()) == 0 and no_hosts is False:
|
|
# Invalid limit
|
|
raise errors.AnsibleError("Specified --limit does not match any hosts")
|
|
|
|
# create the playbook executor, which manages running the plays
|
|
# via a task queue manager
|
|
pbex = PlaybookExecutor(playbooks=args, inventory=inventory, variable_manager=variable_manager, loader=loader, options=options)
|
|
return pbex.run()
|
|
|
|
if __name__ == "__main__":
|
|
#display(" ", log_only=True)
|
|
#display(" ".join(sys.argv), log_only=True)
|
|
#display(" ", log_only=True)
|
|
try:
|
|
sys.exit(main(sys.argv[1:]))
|
|
except AnsibleError, e:
|
|
#display("ERROR: %s" % e, color='red', stderr=True)
|
|
print e
|
|
sys.exit(1)
|
|
except KeyboardInterrupt, ke:
|
|
#display("ERROR: interrupted", color='red', stderr=True)
|
|
print "keyboard interrupt"
|
|
sys.exit(1)
|
|
|