{"id":434,"date":"2022-11-30T04:24:13","date_gmt":"2022-11-30T04:24:13","guid":{"rendered":"http:\/\/www.scmgalaxy.com\/tutorials\/2015\/09\/24\/implement-chef-roles-using-chef-server\/"},"modified":"2022-12-23T05:44:56","modified_gmt":"2022-12-23T05:44:56","slug":"implement-chef-roles-using-chef-server","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/implement-chef-roles-using-chef-server\/","title":{"rendered":"Chef Tutorials: Chef roles Tutorials and Example"},"content":{"rendered":"\n

What is Role?<\/strong><\/p>\n\n\n\n

A role is a way to define certain patterns and processes that exist across nodes in an organization as belonging to a single job function. Each role consists of zero (or more) attributes and a run-list. Each node can have zero (or more) roles assigned to it. When a role is run against a node, the configuration details of that node are compared against the attributes of the role, and then the contents of that role\u2019s run-list are applied to the node\u2019s configuration details. When a chef-client runs, it merges its own attributes and run-lists with those contained within each assigned role.<\/p>\n\n\n\n

How to use Roles in Chef?<\/strong><\/p>\n\n\n\n

    \n
  1. Create a Role and add the cookbooks into it.<\/li>\n\n\n\n
  2. Assign the role into each node or bootstrap new nodes using roles<\/li>\n\n\n\n
  3. The the run list<\/li>\n<\/ol>\n\n\n\n

    <\/p>\n\n\n\n

    How to create Role?<\/strong><\/h2>\n\n\n\n

    Method 1: In Chef Server directly<\/strong><\/h3>\n\n\n\n

    <\/p>\n\n\n

    > knife role create client1<\/code><\/span><\/pre>\n\n\n
    &<\/p>\n\n\n\n
    Add the run list e.g. “recipe[nginx]” under “run_list”<\/p>\n\n\n\n
    Save & exit<\/p>\n\n\n\n
    The role will be created in Chef Server.<\/p>\n\n\n\n
    Example<\/p>\n\n\n
    name \"web_servers\"<\/span>\ndescription \"This role contains nodes, which act as web servers\"<\/span>\nrun_list \"recipe[webserver]\"<\/span>\ndefault_attributes 'ntp'<\/span> => {\n  'ntpdate'<\/span> => {\n    'disable'<\/span> => true<\/span>\n  }\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    Let’s download the role from the Chef server so we have it locally in a Chef repository.<\/strong><\/p>\n\n\n\n
    > knife role show client1 -d -Fjson > roles\/client1.json<\/p>\n\n\n\n
    Now, Lets bootstrap the node using knife with roles<\/strong><\/p>\n\n\n\n
    > knife bootstrap --run-list \"role[webserver]\" --sudo hostname<\/pre>\n\n\n\n
    How to edit the roles in chef Server?<\/strong><\/p>\n\n\n\n
    > knife role edit client1<\/pre>\n\n\n\n
    Method 2: In local repo under chef-repo folder<\/strong><\/h3>\n\n\n
    > vi<\/span> webserver<\/span>.rb<\/span><\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n\n
    example –<\/p>\n\n\n
    name \"web_servers\"<\/span>\ndescription \"This role contains nodes, which act as web servers\"<\/span>\nrun_list \"recipe[webserver]\"<\/span>\ndefault_attributes 'ntp'<\/span> => {\n  'ntpdate'<\/span> => {\n    'disable'<\/span> => true<\/span>\n  }\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    & Then upload to chef server using following commands.<\/p>\n\n\n\n
    $ knife role from file path\/to\/role\/file\n$ knife role from file web_servers.rb<\/pre>\n\n\n\n
    How Assigning Roles to Nodes?<\/strong><\/p>\n\n\n
    > knife node list<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n
    $ knife node edit node_name\nOR<\/span>\n# Assign the role to a node called server:<\/span>\n$ knife node run_list add server 'role[web_servers]'<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    This will bring up the node’s definition file, which will allow us to add a role to its run_list:<\/p>\n\n\n
    { \"name\"<\/span>: \"client1\"<\/span>, \"chef_environment\"<\/span>: \"_default\"<\/span>, \"normal\"<\/span>: { \"tags\"<\/span>: [  ] \t}, \"run_list\"<\/span>: [ \t\"recipe[nginx]\"<\/span> ] } <\/code><\/span>Code language:<\/span> JSON \/ JSON with Comments<\/span> (<\/span>json<\/span>)<\/span><\/small><\/pre>\n\n\n
    For instance, we can replace our recipe with our role in this file:<\/p>\n\n\n
    { \"name\"<\/span>: \"client1\"<\/span>, \"chef_environment\"<\/span>: \"_default\"<\/span>, \"normal\"<\/span>: { \"tags\"<\/span>: [ ] }, \"run_list\"<\/span>: [ \"role[web_server]\"<\/span> ] } <\/code><\/span>Code language:<\/span> JSON \/ JSON with Comments<\/span> (<\/span>json<\/span>)<\/span><\/small><\/pre>\n\n\n
    How to bootstrap node using role?<\/strong><\/p>\n\n\n
    > knife bootstrap {{address}} --ssh-user {{user}} --ssh-password '{{password}}'<\/span> --sudo --use-sudo-password --node-name node1 --run-list 'role[production]'<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n
    > knife bootstrap --run-list<\/span> \"role[phpapp-web]\"<\/span> --sudo hostname<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    How to run roles against nodes?<\/strong><\/p>\n\n\n\n
    You can run chef-client on multiple nodes via knife ssh command like, To query for all nodes that have the webserver role and then use SSH to run the command sudo chef-client, enter:<\/p>\n\n\n
    > knife ssh \"role:webserver\"<\/span> \"sudo chef-client\"<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
    To find the uptime of all of web servers running Ubuntu on the Amazon EC2 platform, enter:<\/p>\n\n\n
    > knife ssh \"role:web\"<\/span> \"uptime\"<\/span> -x ubuntu -a ec2.public_hostname<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
    Method 3: Using Chef Autotmate UI<\/strong><\/h3>\n\n\n\n
    Step 1 – Create a role<\/h4>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Step 2 – Add a List of Cookbooks<\/h4>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Step 3 – Edit a Node and Roles<\/h4>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Step 4 – Run knife command from workstation<\/h4>\n\n\n\n
    $ knife ssh “role:webserver” “sudo chef-client”<\/p>\n\n\n\n
    How it works<\/h2>\n\n\n\n
    You define a role in a Ruby file inside the roles<\/code> folder of your Chef repository. A role consists of a name<\/code> attribute and a description<\/code> attribute. Additionally, a role usually contains a role-specific run list and role-specific attribute settings.<\/p>\n\n\n\n
    Every node, which has a role in its run list, will have the role’s run list expanded into its own. This means that all the recipes (and roles), which are in the role’s run list, will be executed on your nodes.<\/p>\n\n\n\n
    You need to upload your role on your Chef server by using the knife role from file<\/code> command.<\/p>\n\n\n\n
    Only then should you add the role to your node’s run list.<\/p>\n\n\n\n
    Running the Chef client on a node having your role in its run list will execute all the recipes listed in the role.<\/p>\n\n\n\n
    Chef Attributes with Roles<\/h2>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Example of Role file<\/h2>\n\n\n\n
    \n\n\n
    {\n  \"name\"<\/span>: \"rajesh-node-1\"<\/span>,\n  \"chef_environment\"<\/span>: \"_default\"<\/span>,\n  \"normal\"<\/span>: {\n    \"tags\"<\/span>: [\n\n    ]\n  },\n  \"policy_name\"<\/span>: null<\/span>,\n  \"policy_group\"<\/span>: null<\/span>,\n  \"run_list\"<\/span>: [\n  \"role[web-role]\"<\/span>\n]\n\n}<\/code><\/span>Code language:<\/span> JSON \/ JSON with Comments<\/span> (<\/span>json<\/span>)<\/span><\/small><\/pre>\n\n\n
    Reference<\/strong><\/p>\n\n\n\n
    http:\/\/docs.chef.io\/roles.html<\/a><\/p>\n\n\n\n
    https:\/\/docs.chef.io\/knife_ssh.html<\/a><\/p>\n\n\n\n
    https:\/\/docs.chef.io\/knife_role.html<\/a><\/p>\n\n\n