ansible获取已经存在的aws ebs卷id

Question

我正在尝试获取已存在的aws卷id并使用ansible附加到ec2实例。我有一个使用ec2_remote_facts模块的查找任务，该模块获取ec2实例的详细信息，包括任务的卷ID详细信息：

- name: lookup ec2 virtual machines
  ec2_remote_facts:
    aws_access_key: "{{aws_access_key}}"
    aws_secret_key: "{{aws_secret_key}}"
    region: "{{ec2_region}}"
    filters:
      instance-state-name: running
      "tag:Name": "{{server_name}}"
      "tag:Environment": "{{environment_type}}"
      "tag:App": "{{app_name}}"
      "tag:Role": "{{role_type}}"
  register: ec2_info

示例输出：

    "msg": [
        {
            "ami_launch_index": "0",
            "architecture": "x86_64",
            "block_device_mapping": [
                {
                    "attach_time": "2017-01-12T17:24:17.000Z",
                    "delete_on_termination": true,
                    "device_name": "/dev/sda1",
                    "status": "attached",
                    "volume_id": "vol-123456789"
                }
            ],
            "client_token": "",
            "ebs_optimized": false,
            "groups": [
                {
                    "id": "sg-123456789",
                    "name": "BE-VPC"
                }
            ],
..... and more

现在我只需要获取块设备映射 - > volume_id但我不知道如何只获取ID

我已经尝试了几个不起作用的任务，只能得到如下的卷ID：

-  debug: msg="{{item | map(attribute='block_device_mapping') | map('regex_search','volume_id') | select('string') | list }}"
   with_items: "{{ec2_info.instances | from_json}}"

这不起作用：

- name: get associated vols
  ec2_vol:
    aws_access_key: "{{aws_access_key}}"
    aws_secret_key: "{{aws_secret_key}}"
    region:  "{{ec2_region}}"
    instance: "{{ ec2_info.isntances.id }}"
    state: list
    region: "{{ region }}"
  register: ec2_vol_lookup


- name: tag the volumes
  ec2_tag:
    aws_access_key: "{{aws_access_key}}"
    aws_secret_key: "{{aws_secret_key}}"
    region:  "{{ec2_region}}"
    resource: "{{ item.id }}"
    region:  "{{ region }}"
    tags:
      Environment: "{{environment_type}}"
      Groups: "{{group_name}}"
      Name: "vol_{{server_name}}"
      Role: "{{role_type}}"
  with_items: "{{ ec2_vol_lookup.volumes | default([]) }}"

任何的想法？

ansible版本：2.2.0.0

Answer 1

如果您有单个实例和单个块设备，请使用：

- debug: msg="{{ ec2_info.instances[0].block_device_mapping[0].volume_id }}"

如果您有许多实例和许多块设备：

- debug: msg="{{ item.block_device_mapping | map(attribute='volume_id') | list }}"
  with_items: "{{ ec2_info.instances }}"

如果是单个实例和许多设备：

- debug: msg="{{ ec2_info.instances[0].block_device_mapping | map(attribute='volume_id') | list }}"

Answer 2

如果您可以按名称或您在其上设置的其他标记识别卷，则可以使用ec2_vol_facts模块：

ec2_vol_facts:
  region: <your-ec2-region>
  filters:
    "tag:Name": <your-volume-name>
    "tag:Role": <e.g. db-data>
register: ec2_vol

debug:
  msg: "Ids: {{ ec2_vol.volumes | map(attribute='id') | list | to_nice_json }}"

Answer 3

要标记附加到AWS ec2实例的所有卷，我使用了以下内容：

- name: Get instance ec2 facts
  ec2_remote_facts:
    region: "{{ aws_region }}"
    filters:
      "private_ip_address": "{{ inventory_hostname }}"
  register: ec2_info

- name: Tag volumes
  ec2_tag:
    region: "{{ aws_region }}"
    resource: "{{ item.volume_id }}"
    state: present
    tags:
      Name: "{{ ec2_info.instances[0].tags.Name }} - {{ item.device_name}}"
  with_items:
    - "{{ ec2_info.instances[0].block_device_mapping }}"

volume标签将由实例标签Name和设备名称组成（即/ dev / sdf）

Answer 4

- name: Get instances list
  ec2_instance_facts:
    filters:
      "tag:instance": "{{ instance_inventory | map(attribute='instance_id') | list }}"

^ there could be any method, with which you could get instance_id

    region: us-east-1
  register: ec2_sets

- name: Delete instance' volume(s)
  ec2_vol:
    id: '{{ item }}'
    state: absent
  loop: "{{ ec2_sets.instances | sum(attribute='block_device_mappings', start=[]) | map(attribute='ebs.volume_id') | list }}"
  when: ( ec2_sets.instances | sum(attribute='block_device_mappings', start=[]) | map(attribute='ebs.volume_id') | list | length )

^ when condition for testing task idempotent