Introducción a Ansible y AWS EC2

ansible-playbook -i inventario install_lamp.yaml --user ubuntu --private-key /home/josejuan/Lab/vockey.pem

[aws]
34.226.122.155
44.206.245.114

[all:vars]
ansible_user=ubuntu
ansible_ssh_private_key_file=/home/josejuan/Lab/vockey.pem

TASK [Gathering Facts] ******************************************************************************************************************
The authenticity of host '34.226.122.155 (34.226.122.155)' can't be established.
ECDSA key fingerprint is SHA256:AjA3b6U0HwxjtJ3PhhelcplOf0u5xoY8fiEuSATMAJg.

The authenticity of host '44.206.245.114 (44.206.245.114)' can't be established.
ECDSA key fingerprint is SHA256:FJS7iV7GpDIuZPykQ9VQfGRj8l0dfLU1FiZVYJ+gIjI.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  tasks:

    - name: Actualizar los repositorios
      command: apt update

    - name: Instalar el servidor web Apache
      command: apt install apache2 -y

    - name: Instalar el sistema gestor de bases de datos MySQL
      command: apt install mysql-server -y

    - name: Instalar PHP
      command: apt install php libapache2-mod-php php-mysql -y

    - name: Reiniciar el servicio de Apache
      command: systemctl restart apache2

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  tasks:

    - name: Actualizar los repositorios
      shell: apt update

    - name: Instalar el servidor web Apache
      shell: apt install apache2 -y

    - name: Instalar el sistema gestor de bases de datos MySQL
      shell: apt install mysql-server -y

    - name: Instalar PHP
      shell: apt install php libapache2-mod-php php-mysql -y

    - name: Reiniciar el servicio de Apache
      shell: systemctl restart apache2

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  tasks:

    - name: Actualizar los repositorios
      apt:
        update_cache: yes

    - name: Instalar el servidor web Apache
      apt:
        name: apache2
        state: present

    - name: Instalar el sistema gestor de bases de datos MySQL
      apt:
        name: mysql-server
        state: present

    - name: Instalar PHP y los módulos necesarios
      apt:
        name:
          - php
          - php-mysql
          - libapache2-mod-php
        state: present

    - name: Reiniciar el servidor web Apache
      service:
        name: apache2
        state: restarted

    - name: Copiar el archivo phpinfo.php
      copy:
        src: php/phpinfo.php
        dest: /var/www/html/
        mode: 0755

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  # Variables definidas en el playbook
  vars:
    php_packages:
      - php
      - php-mysql
      - libapache2-mod-php

  tasks:

    - name: Actualizar los repositorios
      apt:
        update_cache: yes

    - name: Instalar el servidor web Apache
      apt:
        name: apache2
        state: present

    - name: Instalar el sistema gestor de bases de datos MySQL
      apt:
        name: mysql-server
        state: present

    - name: Instalar PHP y los módulos necesarios
      apt:
        name: "{{ php_packages }}"
        state: present

    - name: Reiniciar el servidor web Apache
      service:
        name: apache2
        state: restarted

php_packages:
    - php
    - php-mysql
    - libapache2-mod-php

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  # Variables definidas en un archivo externo
  vars_files:
    - vars/variables.yml

  tasks:

    - name: Actualizar los repositorios
      apt:
        update_cache: yes

    - name: Instalar el servidor web Apache
      apt:
        name: apache2
        state: present

    - name: Instalar el sistema gestor de bases de datos MySQL
      apt:
        name: mysql-server
        state: present

    - name: Instalar PHP y los módulos necesarios
      apt:
        name: "{{ php_packages }}"
        state: present

    - name: Reiniciar el servidor web Apache
      service:
        name: apache2
        state: restarted

---
- name: Playbook para instalar la pila LAMP
  hosts: aws
  become: yes

  tasks:
    - name: Actualizar los repositorios
      apt:
        update_cache: yes

    - name: Instalar el servidor web Apache
      apt:
        name: apache2
        state: present

    - name: Instalar el sistema gestor de bases de datos MySQL
      apt:
        name: mysql-server
        state: present

    - name: Instalar PHP y los módulos necesarios
      apt:
        name:
          - php
          - php-mysql
          - libapache2-mod-php
        state: present
      notify:
        - Reiniciar el servidor web Apache

  handlers:
    - name: Reiniciar el servidor web Apache
      service:
        name: apache2
        state: restarted

---
- name: Playbook para configurar MySQL
  hosts: aws
  become: yes

  vars:
    - db_name: db_name
    - db_user: db_user
    - db_password: db_password

  tasks:

    # Para utilizar el módulo mysql_db necesitamos tener instalado el paquete python3-mysqldb
    - name: Instalamos el gestor de paquetes de Python pip3
      apt:
        name: python3-pip
        state: present

    - name: Instalamos el módulo de pymysql
      pip:
        name: pymysql
        state: present

    - name: Crear una base de datos
      mysql_db:
        name: "{{ db_name }}"
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

    # El parámetro 'no_log: true' lo utilizamos para ocultar información de salida
    - name: Crear el usuario de la base de datos
      no_log: true
      mysql_user:
        name: "{{ db_user }}"
        password: "{{ db_password }}"
        priv: "{{ db_name }}.*:ALL"
        host: "%"
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

---
- name: Playbook para instalar herramientas adicionales
  hosts: aws
  become: yes

  vars:
    - phpmyadmin_user: pma_user
    - phpmyadmin_password: pma_password
    - phpmyadmin_db_name: db_name

  tasks:

    - name: Descargar phpMyAdmin
      get_url:
        url: https://files.phpmyadmin.net/phpMyAdmin/5.2.0/phpMyAdmin-5.2.0-all-languages.zip
        dest: /tmp/phpMyAdmin-5.2.0-all-languages.zip

    - name: Instalar unzip
      apt:
        name: unzip
        state: present

    - name: Descomprimir phpMyAdmin
      unarchive:
        src: /tmp/phpMyAdmin-5.2.0-all-languages.zip
        dest: /tmp/
        remote_src: yes

    - name: Copiar phpMyAdmin
      copy:
        src: /tmp/phpMyAdmin-5.2.0-all-languages/
        dest: /var/www/html/phpmyadmin
        remote_src: yes

    - name: Cambiar el propietario y el grupo de phpMyAdmin
      file:
        path: /var/www/html/phpmyadmin
        state: directory
        owner: www-data
        group: www-data
        recurse: yes

    - name: Instalar pip3
      apt:
        name: python3-pip
        state: present

    - name: Instalar PyMySQL
      pip:
        name: pymysql
        state: present

    - name: Crear la base de datos para phpMyAdmin
      mysql_db:
        name: "{{ phpmyadmin_db_name }}"
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

    - name: Importar la base de datos de phpMyAdmin
      mysql_db:
        name: "{{ phpmyadmin_db_name }}"
        state: import
        target: /var/www/html/phpmyadmin/sql/create_tables.sql
        login_unix_socket: /var/run/mysqld/mysqld.sock

    - name: Crear el usuario de phpMyAdmin
      mysql_user:
        name: "{{ phpmyadmin_user }}"
        password: "{{ phpmyadmin_password }}"
        priv: "{{ phpmyadmin_db_name }}.*:ALL"
        #host: '%'
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

---
- import_playbook: playbooks/install_lamp.yml
- import_playbook: playbooks/install_tools.yml
- import_playbook: playbooks/deploy_web.yml

- db:
    name: lamp_db
    user: lamp_user
    password: lamp_password

- phpmyadmin:
    user: pma_user
    password: pma_password
    db_name: db_name

---
- name: Playbook para hacer el deploy de una aplicación web
  hosts: aws
  become: yes

  vars_files:
    - vars/variables.yml

  tasks:

    - name: Instalamos el gestor de paquetes de Python pip3
      apt:
        name: python3-pip
        state: present

    - name: Instalamos el módulo de pymysql
      pip:
        name: pymysql
        state: present

    - name: Crear una base de datos
      mysql_db:
        name: "{{ db.name }}"
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

    - name: Crear el usuario de la base de datos
      mysql_user:
        name: "{{ db.user }}"
        password: "{{ db.password }}"
        priv: "{{ db.name }}.*:ALL"
        #host: "%"
        state: present
        login_unix_socket: /var/run/mysqld/mysqld.sock

    - name: Descargar el código fuente de GitHub
      git:
        repo: https://github.com/josejuansanchez/iaw-practica-lamp.git
        dest: /tmp/iaw-practica-lamp
        force: yes
        update: yes

    - name: Copiar el código fuente
      copy:
        src: /tmp/iaw-practica-lamp/src/
        dest: /var/www/html
        remote_src: yes
        mode: 0755

    - name: Editar el nombre de la base de datos en el archivo de configuración
      replace:
        path: /var/www/html/config.php
        regexp: "lamp_db"
        replace: "{{ db.name }}"

    - name: Editar el usuario de la base de datos en el archivo de configuración
      replace:
        path: /var/www/html/config.php
        regexp: "lamp_user"
        replace: "{{ db.user }}"

    - name: Editar el password del usuario de la base de datos en el archivo de configuración
      replace:
        path: /var/www/html/config.php
        regexp: "lamp_password"
        replace: "{{ db.password }}"

    - name: Importar la base de datos
      mysql_db:
        name: "{{ db.name }}"
        state: import
        target: /tmp/iaw-practica-lamp/db/database.sql
        login_unix_socket: /var/run/mysqld/mysqld.sock

    - name: Eliminar el directorio iaw-practica-lamp
      file:
        path: /tmp/iaw-practica-lamp
        state: absent

    - name: Cambiar el propietario del directorio /var/www/html
      file:
        path: /var/www/html
        owner: www-data
        group: www-data
        recurse: yes

---
- name: Playbook para crear un grupo de seguridad y una instancia EC2 en AWS
  hosts: localhost
  connection: local
  gather_facts: false

  vars:
    ec2_security_group: sg_ejemplo_12
    ec2_security_group_description: Grupo de seguridad del ejemplo 12
    ec2_instance_name: instancia_ejemplo_12
    ec2_image: ami-06878d265978313ca
    ec2_instance_type: t2.small
    ec2_key_name: vockey

  tasks:
  - name: Crear un grupo de seguridad
    ec2_group:
      name: "{{ ec2_security_group }}"
      description: "{{ ec2_security_group_description }}"
      rules:
      - proto: tcp
        from_port: 22
        to_port: 22
        cidr_ip: 0.0.0.0/0
      - proto: tcp
        from_port: 80
        to_port: 80
        cidr_ip: 0.0.0.0/0
      - proto: tcp
        from_port: 443
        to_port: 443
        cidr_ip: 0.0.0.0/0
    register: security_group

  - name: Crear una instancia EC2
    ec2_instance:
      name: "{{ ec2_instance_name }}"
      key_name: "{{ ec2_key_name }}"
      security_group: "{{ ec2_security_group }}"
      instance_type: "{{ ec2_instance_type }}"
      image_id: "{{ ec2_image }}"
      count: 1
      state: running
    register: ec2

---
- name: Playbook para crear un grupo de seguridad, una instancia EC2 y una IP elástica en AWS
  hosts: localhost
  connection: local
  gather_facts: false

  vars:
    ec2_security_group: sg_ejemplo_13
    ec2_security_group_description: Grupo de seguridad del ejemplo 13
    ec2_instance_name: instancia_ejemplo_13
    ec2_image: ami-06878d265978313ca
    ec2_instance_type: t2.small
    ec2_key_name: vockey

  tasks:
  - name: Crear un grupo de seguridad
    ec2_group:
      name: "{{ ec2_security_group }}"
      description: "{{ ec2_security_group_description }}"
      rules:
      - proto: tcp
        from_port: 22
        to_port: 22
        cidr_ip: 0.0.0.0/0
      - proto: tcp
        from_port: 80
        to_port: 80
        cidr_ip: 0.0.0.0/0
      - proto: tcp
        from_port: 443
        to_port: 443
        cidr_ip: 0.0.0.0/0
    register: security_group

  - name: Crear una instancia EC2
    ec2_instance:
      name: "{{ ec2_instance_name }}"
      key_name: "{{ ec2_key_name }}"
      security_group: "{{ ec2_security_group }}"
      instance_type: "{{ ec2_instance_type }}"
      image_id: "{{ ec2_image }}"
      count: 1
      state: running
    register: ec2

  # - name: Mostramos el contenido de la variable ec2
  #   debug:
  #     msg: "ec2: {{ ec2 }}"

  - name: Crear una nueva IP elástica y asociar a la instancia
    ec2_eip:
      device_id: "{{ ec2.instances[0].instance_id }}"
    register: eip

  - name: Mostrar la IP elástica
    debug:
      msg: "La IP elástica es: {{ eip.public_ip }}"

---
- name: Playbook para eliminar un grupo de seguridad y una instancia EC2 en AWS
  hosts: localhost
  connection: local
  gather_facts: false

  vars:
    ec2_security_group: sg_ejemplo_13
    ec2_instance_name: instancia_ejemplo_13

  tasks:

    - name: Obtener el id de instancia a partir del nombre
      ec2_instance_info:
        filters:
          "tag:Name": "{{ ec2_instance_name }}"
          "instance-state-name": "running"
      register: ec2

    - name: Desasociar de IP elástica de la instancia EC2
      ec2_eip:
        device_id: "{{ ec2.instances[0].instance_id }}"
        state: absent

    - name: Eliminar la instancia EC2
      ec2_instance:
        filters:
          "tag:Name": "{{ ec2_instance_name }}"
        state: absent

    - name: Eliminar el grupo de seguridad
      ec2_group:
        name: "{{ ec2_security_group }}"
        state: absent