Each play of the playbook must have its parameter hosts set.<\/p>\n\n\n\n
Here is a quick example of different hosts values that you might be familiar with:<\/p>\n\n\n
\n---\n- name: My play targeting all hosts \n hosts: all\n tasks:\n - debug:\n msg: 'Running on all hosts'\n\n- name: Targeting multiple groups called dbservers and webservers\n hosts:\n - dbservers\n - webservers \n tasks:\n - debug:\n msg: 'Running on all dbservers and webserver'\n\n- name: Targeting only one host called dbserver-01\n hosts: dbserver-01\n tasks: \n - debug:\n msg: 'Running on one hosts'\n\n- name: Running on the Ansible server\n hosts: localhost\n connection: local\n tasks:\n - debug:\n msg: 'Running on localhost'\n<\/pre><\/div>\n\n\nIf you are developing with Ansible, you probably already have written a playbook. You might also have duplicated a playbook to target different groups and hosts due to:<\/p>\n\n\n\n
- \n
- Some use cases<\/li>\n\n\n\n
- The organization of your Ansible and inventories files<\/li>\n\n\n\n
- Any others reasons<\/li>\n<\/ul>\n\n\n\n
This article will focus on the different ways we can provide the hosts parameter to avoid handling multiple playbook files.<\/p>\n\n\n\n
\n\n\n\nFor all the following examples, you can use this ‘hosts’ file and replace all machine hostnames with your own.<\/p>\n\n\n
\n# hosts\n[dbservers]\ndbserver-01\ndbserver-02\n\n[webservers]\nwebserver-01\n<\/pre><\/div>\n\n\n
Ansible extra variable – Specify hosts on the command line<\/h2>\n\n\n\n
The first idea that may come to mind is to use an Ansible variable<\/strong> and pass it as an extra vars<\/strong>.
Here I name the variable my_playbook_hosts<\/strong> and ask to target a group and a host.<\/p>\n\n\n\n# extravars.yml\n---\n- name: My play targeting hosts specified in the command line \n hosts: '{{ my_playbook_hosts }}'\n tasks:\n - debug:\n msg: 'Running on hosts specified by my extra vars'\n\n<\/pre><\/div>\n\n\nThen you can simply run the ansible-playbook<\/strong> command with the option \u2010\u2010extra-vars<\/strong>:<\/p>\n\n\n
\nansible-playbook -i hosts extravars.yml -e 'my_playbook_hosts=dbservers'\n<\/pre><\/div>\n\n\n
This solution works fine, you just need to come up with a new variable and be sure that its name is not already used by Ansible or in your existing roles\/tasks (except if it is expected).<\/p>\n\n\n\n
Default value<\/h4>\n\n\n\n
Using the Jinja2 ‘default’ filter, you can specify a default value.
That way, if you don’t provide the extra variable, the playbook will run on the default value hosts. Here for example with the group ‘dbservers’: <\/p>\n\n\n\n hosts: '{{ my_playbook_hosts | default("dbservers") }}'\n<\/pre><\/div>\n\n\nCommon pattern<\/h4>\n\n\n\n
A pattern can be used for targeting hosts and groups.
More information can be read in the Ansible official documentation<\/a>. <\/p>\n\n\n\n![\"Screenshot](\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2023\/02\/screenshot-ansible-common-pattern-1024x400.png\")
Link to official documentation: https:\/\/docs.ansible.com\/ansible\/latest\/inventory_guide\/intro_patterns.html#common-patterns<\/a><\/figcaption><\/figure>\n\n\n \n# Target group webservers and host dbserver-01.\nansible-playbook -i hosts extravars.yml -e 'my_playbook_hosts=webservers,dbserver-01'\n\n# Target group dbservers, excluding host webserver-01.\nansible-playbook -i hosts extravars.yml -e 'my_playbook_hosts=dbservers,!webserver-01'\n\n# Target nothing as all is negate.\nansible-playbook -i hosts blogtest.yml -e 'my_playbook_hosts=!all,webserver-01'\n<\/pre><\/div>\n\n\n
Those patterns can also be used in the playbook file directly:<\/p>\n\n\n
\n- name: Targeting multiple groups called dbservers and webservers\n hosts: dbservers,webservers \n\n- name: Targeting all except webservers\n hosts: 'all,!webservers' \n<\/pre><\/div>\n\n\n
Negate<\/h4>\n\n\n\n
About negating hosts and groups, always use single quotes to prevent bash interpolation or syntax error.<\/p>\n\n\n\n
Ansible limit – Limit on which host\/group it runs<\/h2>\n\n\n\n
Command ansible-playbook has an option which is \u2010\u2010limit<\/strong> or -l<\/strong>, which further limits selected hosts to an additional pattern.<\/p>\n\n\n\n
Let’s say your playbook runs on ‘dbservers’ group, with limit, you can restrict further the hosts or groups on which it should run: <\/p>\n\n\n
\n# limit.yml\n---\n- name: My play targeting all dbservers\n hosts: dbservers\n tasks:\n - debug:\n msg: 'Running all dbservers'\n<\/pre><\/div>\n\n
\n# Will only target host dbserver-02, if its belong to dbservers\nansible-playbook -i hosts limit.yml -l dbserver-02 \n\n# Will target dbservers group, except the hosts dbserver-02\nansible-playbook -i hosts limit.yml -l '!dbserver-02'\n<\/pre><\/div>\n\n
\n# limit2.yml\n---\n- name: Play running on all hosts\n hosts: all\n tasks:\n - debug:\n msg: 'Running on all hosts'\n<\/pre><\/div>\n\n
\n# Will only target groups webservers and host dbserver-01\nansible-playbook -i hosts limit2.yml -l 'webservers,dbserver-01'\n<\/pre><\/div>\n\n\n
I personnaly prefer this method to the extra vars, as it doesn’t require adding a new additional variable and doesn’t require modifying the existing playbook. <\/p>\n\n\n\n
Diving more into ansible-playbook \u2010\u2010limit<\/h3>\n\n\n\n
You can find a lot of examples of ansible-playbook \u2010\u2010limit<\/strong> with a playbook targeting all hosts (hosts: all)<\/strong>.<\/p>\n\n\n\n
That is something that bothered me a little depending on the playbook usage.
If the playbook is to be used on all hosts every time, with rare occasions to target only a specific host and\/or group, then it should be good.<\/p>\n\n\n\n
On the contrary, if the playbook is to always be run to specific hosts and groups every time, then it might be dangerous to set the ‘hosts’ to ‘all’ or any others groups by default.
If by accident, the \u2010\u2010limit<\/strong> option is forgotten, your playbook will be run on the ‘hosts’ specified on the playbook file and might cause serious issues.<\/p>\n\n\n\nHere is a safer solution<\/strong> that I find elegant and good.<\/p>\n\n\n\n
Ansible limit – Specify hosts on the command line<\/h3>\n\n\n\n
With this method, the playbook only runs on the pattern you provide<\/strong> in the limit option.
It is exactly the same way as how \u2010\u2010extra-vars <\/strong>work, but in this situation, you don’t need to create a new variable.<\/p>\n\n\n\nThe value specified in \u2010\u2010limit<\/strong> is stored in the variable ansible_limit<\/strong>.<\/p>\n\n\n
\n# safer.yml\n---\n- name: Play running only on the pattern given by the option --limit\n hosts: '{{ ansible_limit | default(omit) }}'\n tasks:\n - debug:\n msg: 'Running on hosts specified by limit'\n<\/pre><\/div>\n\n\n# Will target all host\nansible-playbook -i hosts safer.yml -l 'all'\n\n# Will target group dbservers\nansible-playbook -i hosts safer.yml -l 'dbservers'\n\n# Will target group webservers and host dbserver-01\nansible-playbook -i hosts safer.yml -l 'webservers,dbserver-01'\n\n# Will target all except dbservers \nansible-playbook -i hosts safer.yml -l 'all,!dbservers'\n<\/pre><\/div>\n\n\n
The special keyword omit in default is a special variable that allows omitting the parameters, causing the playbook to run without crashing.
The results will be a skip of the play.<\/p>\n\n\n\nansible-playbook -i hosts safer.yml\n[WARNING]: Could not match supplied host pattern, ignoring: None\n\nPLAY [Play running only on the pattern given by the option --limit] **************************************************************************\nskipping: no hosts matched\n\nPLAY RECAP ****************************************************************************************************************************************************\n<\/pre><\/div>\n\n\n
Conclusion<\/h2>\n\n\n\n
In conclusion, the best method will always vary and depend on different factors, so try out the different methods and pick those suitable for your needs.<\/p>\n\n\n\n
You are now able to specify via the command line which hosts\/groups to apply your playbook! <\/p>\n\n\n\n
<\/p>\n\n\n\n
\n\n\n\nLearn more on Ansible with our Training course: https:\/\/www.dbi-services.com\/en\/courses\/ansible-basics\/ <\/a><\/p>\n\n\n\n