dhoeric / ansible-aws-ssm Goto Github PK

View Code? Open in Web Editor NEW

13.0 2.0 38.0 26 KB

Ansible role to install AWS EC2 Systems Manager

Home Page: https://galaxy.ansible.com/dhoeric/aws-ssm/

ansible ec2

ansible-aws-ssm's Introduction

dhoeric.aws-ssm

Install AWS EC2 Systems Manager (SSM) agent

http://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent.html

Requirements

None

Role Variables

Available variables are listed below, along with default values:

# The defaults provided by this role are specific to each distribution.
url: 'amd64'

For installion in Raspbian, please find the activation code and id before using this role

url: 'arm'
aws_ssm_activation_code:
aws_ssm_activation_id:
aws_ssm_ec2_region: "{{ec2_region}}"

Dependencies

None

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: servers
  roles:
     - { role: dhoeric.aws-ssm }

License

MIT

Author Information

https://www.github.com/dhoeric

ansible-aws-ssm's People

Contributors

Stargazers

Watchers

ansible-aws-ssm's Issues

Debian is not supported

Actually debian OS is not supported

Need code simplification

Few tasks are not needed ( like download deb file then installation it)
since ansible 2.1 deb can donwload it automaticaly.
also the sad effect it's keeping useless temporary files into servers.

Failed to validate GPG signature for amazon-ssm-agent-

Travis test don't test if the role is idempotent

Actually the Travis test don't test if role is idempotent ...

For exemple, GROG.authorized-key & holms.fqdn travis test do like :

# Run the role/playbook again, checking to make sure it's idempotent.
  - >
    ansible-playbook tests/test.yml -i tests/inventory --connection=local --sudo
   | grep -q 'changed=0.*failed=0'
   && (echo 'Idempotence test: pass' && exit 0)
   || (echo 'Idempotence test: fail' && exit 1)

Failed to validate GPG signature for amazon-ssm-agent-*

Hello,

I was trying this role on Centos 8 then I got this error:

amazon-ebs: TASK [amazon-ssm-agent : Get CPU architecture] *********************************
    amazon-ebs: ok: [127.0.0.1] => {"changed": false, "cmd": ["getconf", "LONG_BIT"], "delta": "0:00:00.006878", "end": "2021-03-29 18:46:09.663904", "rc": 0, "start": "2021-03-29 18:46:09.657026", "stderr": "", "stderr_lines": [], "stdout": "64", "stdout_lines": ["64"]}
    amazon-ebs:
    amazon-ebs: TASK [amazon-ssm-agent : Change URL destination for 32bit arch] ****************
    amazon-ebs: skipping: [127.0.0.1] => {"changed": false, "skip_reason": "Conditional result was False"}
    amazon-ebs:
    amazon-ebs: TASK [amazon-ssm-agent : Install rpm file for Redhat Family (Amazon Linux, RHEL, and CentOS) 32/64-bit] ***
    amazon-ebs: fatal: [127.0.0.1]: FAILED! => {"changed": false, "msg": "Failed to validate GPG signature for amazon-ssm-agent-3.0.882.0-1.x86_64"}

It seems related to this issue, which has been "resolved" but I still think the verification process is cumbersome. Any idea how to implement this process as part of this role?

Thanks!

SSM fails to install on latest Ubuntu 16.04

The latest Ubuntu 16.04 releases on AWS have SSM agent pre-installed with SNAP. Currently, ansible-aws-ssm assumes deb installation, and as such attempts to use the role fail.

From https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-manual-agent-install.html#agent-install-ubuntu:

Beginning with instances created from Ubuntu Server 16.04 AMIs identified with 20180627, the SSM Agent is pre-installed using Snap packages. For example: ubuntu/images/hvm-ssd/ubuntu-xenial-16.04-amd64-server-20180627

need simplify when condition for redhat OS family

need simplify when condition for redhat OS family
this test condition :

(ansible_distribution == 'Amazon' or ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux')

can be much more simple with ansible_os_family variable :

ansible_os_family == 'RedHat'

this ansible role is not idempotent

even after several run, i always get this :

PLAY RECAP *******************************************************************************************************************************************************************************************************************************
server                    : ok=5    changed=1    unreachable=0    failed=0

Please add a release version

Hi,

please create a release, it's will permit to have a version number for this role in galaxy
so it's will easier to update role if needed or keep a forced version of the role.

ansible-galaxy install  -r update_roles.yml 
- extracting dhoeric.aws-ssm to /home/fedora/svn/ansible/roles/dhoeric.aws-ssm
 [WARNING]: - dhoeric.aws-ssm was NOT installed successfully: the specified role dhoeric.aws-ssm appears to already exist. Use --force
to replace it.