184 lines
6.3 KiB
Python
184 lines
6.3 KiB
Python
import paramiko
|
|
|
|
ssh = paramiko.SSHClient()
|
|
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
|
|
ssh.connect('140.44.4.11', username='root', key_filename=r'C:\Users\Snarf\.ssh\id_ed25519_snarfnet', timeout=10)
|
|
|
|
orm_provisioning_code = """
|
|
from awx.main.models import (
|
|
Organization, Inventory, Group, Host, Credential, Project, JobTemplate, Schedule
|
|
)
|
|
|
|
# 1. Organization
|
|
org, created = Organization.objects.get_or_create(name='Snarfnet Homelab', defaults={'description': 'Snarfnet Homelab Infrastructure Automation'})
|
|
print(f"Organization: {org.name} (id={org.id}, created={created})")
|
|
|
|
# 2. Inventory
|
|
inv, created = Inventory.objects.get_or_create(
|
|
name='Snarfnet Master Inventory',
|
|
defaults={'organization': org, 'description': 'Master Inventory across all 28 Homelab hosts'}
|
|
)
|
|
if not inv.organization:
|
|
inv.organization = org
|
|
inv.save()
|
|
print(f"Inventory: {inv.name} (id={inv.id}, created={created})")
|
|
|
|
# 3. Groups & Hosts definition
|
|
GROUPS = {
|
|
'k3s_aerodrome_masters': {
|
|
'vars': {'ansible_user': 'root', 'cluster': 'aerodrome', 'node_role': 'master'},
|
|
'hosts': {
|
|
'sninfr2lnxctl01': '140.44.4.11',
|
|
'sninfr2lnxctl02': '140.44.4.12',
|
|
'sninfr2lnxctl03': '140.44.4.13',
|
|
}
|
|
},
|
|
'k3s_aerodrome_workers': {
|
|
'vars': {'ansible_user': 'root', 'cluster': 'aerodrome', 'node_role': 'worker'},
|
|
'hosts': {
|
|
'sninfr2lnxwrk01': '140.44.4.21',
|
|
'sninfr2lnxwrk02': '140.44.4.22',
|
|
'sninfr2lnxwrk03': '140.44.4.23',
|
|
'sninfr2lnxwrk04': '140.44.4.24',
|
|
'sninfr2lnxwrk05': '140.44.4.25',
|
|
'sninfr2lnxwrk06': '140.44.4.26',
|
|
'sninfr2lnxwrk07': '140.44.4.27',
|
|
}
|
|
},
|
|
'k3s_spaceport_masters': {
|
|
'vars': {'ansible_user': 'root', 'cluster': 'spaceport', 'node_role': 'master'},
|
|
'hosts': {
|
|
'sninfr0lnxctl01': '140.44.4.41',
|
|
'sninfr0lnxctl02': '140.44.4.42',
|
|
'sninfr0lnxctl03': '140.44.4.43',
|
|
'sninfr0lnxctl04': '140.44.4.44',
|
|
}
|
|
},
|
|
'k3s_spaceport_workers': {
|
|
'vars': {'ansible_user': 'root', 'cluster': 'spaceport', 'node_role': 'worker'},
|
|
'hosts': {
|
|
'sninfr0lnxwrk01': '140.44.4.51',
|
|
'sninfr0lnxwrk02': '140.44.4.52',
|
|
'sninfr0lnxwrk03': '140.44.4.53',
|
|
'sninfr0lnxwrk04': '140.44.4.54',
|
|
'sninfr0lnxwrk05': '140.44.4.55',
|
|
'sninfr0lnxwrk06': '140.44.4.56',
|
|
}
|
|
},
|
|
'swarm_shipyard': {
|
|
'vars': {'ansible_user': 'snarf', 'ansible_become': True, 'cluster': 'shipyard'},
|
|
'hosts': {
|
|
'snshpd4lnxswm01': '140.44.4.71',
|
|
'snshpd4lnxswm02': '140.44.4.72',
|
|
'snshpd4lnxswm03': '140.44.4.73',
|
|
'snshpd4lnxswm04': '140.44.4.74',
|
|
'snshpd4lnxswm05': '140.44.4.75',
|
|
}
|
|
},
|
|
'ai_pi_cluster': {
|
|
'vars': {'ansible_user': 'snarf', 'ansible_become': True},
|
|
'hosts': {
|
|
'sninfr4lnxaih01': '140.44.4.7',
|
|
'sninfr4lnxaih02': '140.44.4.8',
|
|
}
|
|
},
|
|
'smart_home_nodes': {
|
|
'vars': {'ansible_user': 'snarf', 'ansible_become': True},
|
|
'hosts': {
|
|
'homeassistant': '14.4.4.20',
|
|
'nutserver': '14.4.4.44',
|
|
}
|
|
},
|
|
'synology_nas': {
|
|
'vars': {},
|
|
'hosts': {
|
|
'sn_nas': '14.10.10.71',
|
|
'snarfnas': '14.10.10.72',
|
|
}
|
|
}
|
|
}
|
|
|
|
import yaml
|
|
for grp_name, data in GROUPS.items():
|
|
grp, _ = Group.objects.get_or_create(name=grp_name, inventory=inv)
|
|
grp.variables = yaml.dump(data.get('vars', {}))
|
|
grp.save()
|
|
|
|
for h_name, ip in data.get('hosts', {}).items():
|
|
h, _ = Host.objects.get_or_create(name=h_name, inventory=inv)
|
|
h.variables = yaml.dump({'ansible_host': ip})
|
|
h.save()
|
|
if not grp.hosts.filter(id=h.id).exists():
|
|
grp.hosts.add(h)
|
|
|
|
print(f"Total Hosts in '{inv.name}': {inv.hosts.count()}")
|
|
print(f"Total Groups in '{inv.name}': {inv.groups.count()}")
|
|
|
|
# 4. Project
|
|
proj, created = Project.objects.get_or_create(
|
|
name='Snarfnet Infrastructure Playbooks',
|
|
defaults={
|
|
'organization': org,
|
|
'scm_type': 'git',
|
|
'scm_url': 'https://git.snarfnet.net/Snarf/SnarfCode.git',
|
|
'scm_branch': 'main',
|
|
'scm_clean': True,
|
|
'scm_delete_on_update': True,
|
|
'scm_update_on_launch': True,
|
|
'description': 'Snarfnet Ansible Playbooks from local Gitea'
|
|
}
|
|
)
|
|
print(f"Project: {proj.name} (id={proj.id}, created={created})")
|
|
|
|
# 5. Credentials lookup
|
|
cred_root = Credential.objects.filter(name__icontains='root').first()
|
|
cred_snarf = Credential.objects.filter(name__icontains='snarf').first()
|
|
print(f"Root Credential: {cred_root.name if cred_root else 'None'}")
|
|
print(f"Snarf Credential: {cred_snarf.name if cred_snarf else 'None'}")
|
|
|
|
# 6. Job Templates
|
|
TEMPLATES = [
|
|
{
|
|
'name': 'Daily Drift & Agent Health Audit',
|
|
'playbook': 'ansible/playbooks/daily_drift_audit.yml',
|
|
'desc': 'Verifies time synchronization, Zabbix agent, and SSH access daily'
|
|
},
|
|
{
|
|
'name': 'Weekly OS & Security Patching',
|
|
'playbook': 'ansible/playbooks/weekly_os_patching.yml',
|
|
'desc': 'Rolling serial-1 apt update and dist-upgrade with reboot verification'
|
|
},
|
|
{
|
|
'name': 'Aerodrome K3s Pre-Upgrade Check',
|
|
'playbook': 'ansible/playbooks/k3s_aerodrome_precheck.yml',
|
|
'desc': 'Validates Aerodrome masters and creates on-demand etcd snapshot'
|
|
}
|
|
]
|
|
|
|
for t in TEMPLATES:
|
|
jt, created = JobTemplate.objects.get_or_create(
|
|
name=t['name'],
|
|
defaults={
|
|
'project': proj,
|
|
'inventory': inv,
|
|
'playbook': t['playbook'],
|
|
'description': t['desc'],
|
|
'job_type': 'run',
|
|
}
|
|
)
|
|
if cred_root and not jt.credentials.filter(id=cred_root.id).exists():
|
|
jt.credentials.add(cred_root)
|
|
if cred_snarf and not jt.credentials.filter(id=cred_snarf.id).exists():
|
|
jt.credentials.add(cred_snarf)
|
|
print(f"Job Template: {jt.name} (id={jt.id}, created={created})")
|
|
|
|
print("AWX Provisioning Complete!")
|
|
"""
|
|
|
|
cmd = f"kubectl exec -i -n awx -c awx-task deployment/awx-task -- awx-manage shell_plus --quiet << 'EOF'\n{orm_provisioning_code}\nEOF"
|
|
stdin, stdout, stderr = ssh.exec_command(cmd)
|
|
print(stdout.read().decode())
|
|
print(stderr.read().decode())
|
|
|
|
ssh.close()
|