使用 Ansible 安裝 InfluxDB 並建立 User，Database，Retention Policy

之前筆記 使用 Ansible 安裝 InfluxDB 紀錄到如何使用 Ansible 來安裝 InfluxDB，也提到透過 Ansible 安裝 InfluxDB 與直接執行 script 來安裝 差異不大，不過透過 Ansible 安裝 InfluxDB 好處主要是在於後續建立 User，Database，Retention Policy 上，所以立馬來紀錄一下囉

基本環境說明

1. Azure 標準 B1ms (1 vcpu，2 GiB 記憶體)
2. Centos 7.7
3. ansible 2.7.8
4. InfluxDB 1.7

5. ansible script

   • inventory.ini

     [influxdb]
     influx1 ansible_host=192.168.1.101 ansible_port=22 ip=192.168.1.101  ansible_user=yowko ansible_password=pass.123 ansible_become_password=pass.123
     

   • install.yml

     ---
     - name: Install Influxdb
     gather_facts: false
     hosts: influxdb
     tasks:
         - name: Add repo
           shell:
             cmd: |
               cat <<EOF | sudo tee /etc/yum.repos.d/influxdb.repo
               [influxdb]
               name = InfluxDB Repository - RHEL \$releasever
               baseurl = https://repos.influxdata.com/rhel/\$releasever/\$basearch/    stable
               enabled = 1
               gpgcheck = 1
               gpgkey = https://repos.influxdata.com/influxdb.key
               EOF
         - name: Install influxdb
           yum:
             name: influxdb
             state: latest
         - name: Start influxdb Service
           service:
             name: influxdb
             state: restarted
     

個別語法

1. create user

   - name: Create a user
     shell: |
       curl -XPOST http://localhost:8086/query --data-urlencode "q=CREATE USER admin WITH PASSWORD pass.123 WITH ALL PRIVILEGES"
   

2. create database

   - name: Create Database
     shell: |
       curl -XPOST http://localhost:8086/query --data-urlencode "q=CREATE DATABASE yowko"
   

3. create retention policy

   - name: Create Retention Policy
     shell: |
       curl -XPOST http://localhost:8086/query --data-urlencode "q=CREATE RETENTION POLICY yowko_test ON yowko DURATION 90d REPLICATION 1"
   

實際語法

1. 將可以設定的變數皆抽出來統一管理

2. 需要檢查 influxdb service 啟動與否

   詳細內容可以參考之前筆記 Ansible 透過 Http Status Code 當做檢核條件

3. 需要設定啟用 auth

4. 完整語法

   ---
   - name: Install Influxdb
     gather_facts: false
     vars:
       influxdb_username: admin
       influxdb_password: pass.123
       influxdb_database_name: yowko
       influxdb_rp_name: yowko_test
       influxdb_url: http://localhost:8086
     hosts: influxdb
     tasks:
       - name: Add repo
         shell:
           cmd: |
             cat <<EOF | sudo tee /etc/yum.repos.d/influxdb.repo
             [influxdb]
             name = InfluxDB Repository - RHEL \$releasever
             baseurl = https://repos.influxdata.com/rhel/\$releasever/\$basearch/stable
             enabled = 1
             gpgcheck = 1
             gpgkey = https://repos.influxdata.com/influxdb.key
             EOF
       - name: Install influxdb
         yum:
           name: influxdb
           state: latest
       - name: Start influxdb Service
         service:
           name: influxdb
           state: restarted
       - name: "wait for InfluxDB to come up"
         uri:
           url: "{{influxdb_url}}/ping"
           status_code: 204
         register: result
         until: result.status == 204
         retries: 60
         delay: 1
       - name: Create a user
         shell: |
           curl -XPOST {{influxdb_url}}/query --data-urlencode "q=CREATE USER {    {influxdb_username}} WITH PASSWORD '{{influxdb_password}}' WITH ALL PRIVILEGES"
       - name: Create Database
         shell: |
           curl -XPOST {{influxdb_url}}/query --data-urlencode "q=CREATE DATABASE {    {influxdb_database_name}}"
       - name: Create Retention Policy
         shell: |
           curl -XPOST {{influxdb_url}}/query --data-urlencode "q=CREATE RETENTION POLICY {    {influxdb_rp_name}} ON {{influxdb_database_name}} DURATION 90d REPLICATION 1"
       - name: Enable http auth
         shell: |
           sed -i 's/# auth-enabled = false/auth-enabled = true/g' /etc/influxdb/influxdb.conf
       - name: Restart influxdb Service
         service:
           name: influxdb
           state: restart
   

心得

之前安裝測試時失敗了好幾次，主要是因為 InfluxDB 安裝後，服務啟動需要時間，Ansible 直接執行 http request 動作時會遇到 servive 尚未提供服務的問題，後來加上 InfluxDB 建立的 health check 確認之後就利完成本設定，最後修改 InfluxDB 的 auth 設定並重啟服務即可

參考資訊

1. 使用 Ansible 安裝 InfluxDB
2. Ansible 透過 Http Status Code 當做檢核條件
3. InfluxDB API reference