Ansible Interview Questions And Answer

Intermediate Ansible Interview Questions

34. How can a loop be implemented within a template to iterate over a group of hosts in a list?

You can use the “with_items” loop construct to iterate over all the hosts in a group and perform a specified task. Let's see an example playbook.

- name: Perform a task on multiple hosts
 hosts: host_group
 tasks:
   - name: task_name
     //perform a task here
     with_items: "{{ groups[host_group] }}"

Using this, you can easily perform any task on multiple hosts.

35. How can you achieve the difference of the first host in the group?

This can be done using the command below:

{{hostvars [groups ['webservers'] [0]] ['ansible_eth0'] ['ipv4'] ['address']}}

In the command above, we get the name of the first machine host in the group of web servers. If you are using a template to do this, use Jinja2' #set,' or you can use set_fact, as shown below:

- set_fact: headnode = {{groups [['webservers'] [0]]}}
- debug: msg = {{hostvars [headnode] .ansible_eth0.ipv4.address}}

36. Why use the term '{{}}'? And how can one combine dynamic or dynamic words?

One basic rule is 'always use {{}} unless:.' Terms always work with Jinja2 to resolve the issue. So, 'when: failed_when:' and 'changed_when:' remain a template, and we should avoid adding {{}}.

In some cases, we must use parentheses; otherwise, distinguishing between unexplained variables and the character unit will be challenging.

37. How do I write a Functional Holder?

Suppose you want to create a handle that restarts the service only if it is already active.

As shown below, holders can "listen" to common topics, and tasks can inform those topics. This functionality makes it much easier to configure multiple handles. It also separates the holders from their names, making it easier to share the handles between playbooks and roles:

- Name: Check to restart
shell: check_is_started.sh
register: result
listen: Restart processes

- Name: Restart in terms of step 2
service: name = service status = restarted
when: result
listen: Restart processes

38. How can you keep confidential data in a playbook?

Suppose you have a function that does not want to display the output or command given when using mode -v (verbose). The following function can be used to perform:

- Name: secret function
shell: / usr / bin / do_something --value = {{secret_value}}
no_log: True

This can store verbose output and hide sensitive information from others who would like to see the result.

The no_log attribute can apply to all games:

- strangers: all
no_log: True

39. What are Ansible Vaults, and why are they used?

Ansible Vault is a feature that lets you keep all your secrets safe. It can encrypt all files, all YAML playbooks, or a few variables. It provides a place where you can not only encrypt sensitive data but also incorporate it into your playbooks.

Vault is used for file-level grading, where files are either fully encrypted or not encrypted. It uses the same password to write and write files, making Ansible Vault easy to use.

40. What is the difference between Ansible and Puppet?

Management and Editing: In Ansible, the server pushes the configuration on nodes on the other side of the puppet, and the client pulls the configuration from the server. Also, in configuration, the doll has a 30-minute voting agent (default settings) to ensure that all nodes are in the right state. Ansible does not have that feature in the free version.

Availability: Ansible has two backup nodes, and the doll has more than one main node. So they both try to be more accessible. 

41. What is the Ansible Tower?

Ansible Tower is Ansible at a more significant business level, a web-based solution for managing your organization with a straightforward visual interface that provides a dashboard with all the status summaries of all strangers, which allows for quick submissions, and monitors all configurations.

The tower allows you to share SSH data anonymously, record all tasks, manage word lists with graphics and adapt to various cloud providers. 

42. What features does the Ansible Tower offer?

• Ansible Tower Dashboard - Ansible Tower Dashboard displays everything that happens in your Sensible location, such as hosts, inventory status, recent activity, and more.
• Real-Time Activity Updates - Since Ansible can automatically create complete infrastructure, you can see real-time updates of tasks, such as games and tasks separated by each machine for success or failure. So, with this, you can see your default status and know what's next in line.
• Multi-Playbook Workflows - It allows you to combine any number of playbooks, regardless of how you use different inventories, use various details, or run other users.
• Who Done the Work - As the name suggests, you can quickly know who did the work where and when, and all the automated work is securely entered ansible tower.
• Scale Capacity With Clusters' help, we can connect multiple Ansible Tower locations in the Ansible Tower collection as collections increase duplication and volume, allowing you to measure Ansible automation across the business.
• Combined Notifications - This feature allows you to notify a person or team if a task is successful or failed for the entire organization at once or customized according to each job.
• Customize Tasks - Various functions such as Playbook Run, cloud inventory updates, and resource management updates can be organized within Ansible Tower to work according to need.
• Manage and Track Inventory - Ansible Tower helps you manage your entire infrastructure by allowing you to quickly deploy a list of public cloud providers such as Amazon Web Services, Microsoft Azure, and more.
• Self-Help - This Ansible Tower feature lets you launch Playbooks with just one click. It can also let you choose from the available, secure credentials or notify you of variables and monitor resulting usage.
• REST API & Tower CLI Tool - All features available in Ansible Tower are available through Ansible Tower's REST API, which provides an ideal system management API. The Ansible Tower's CLI tool is available to start operations.

43. How to automate the password input in the playbook using encrypted files? 

To automate the password input in a playbook, you can use encrypted files like Ansible Vault. You can encrypt the password and store it in a Vault-encrypted file, then use the include_vars module in your playbook to include the encrypted file and decrypt the password. This allows you to securely store and use sensitive information in your playbooks without exposing it in plain text.

44. What is "Idempotency"?

Idempotency is an essential factor that we should know. Prevents unnecessary changes in managed hosts. By default, you can perform one or more tasks on the server as many times as you need, but it will not change anything already fixed and working correctly. To put it bluntly, only additional changes are required and are not yet available. 

45. What is the Ansible Galaxy?

This is a tool integrated with Ansible to create a basic index structure. Galaxy is a website that allows users to discover and share relevant content. To download the roles from the website, you can refer to this link:

$ ansible-galaxy enter username.role_name

46. How do you use Ansible to create encrypted files?

To create an encrypted file, 

use the 'ansible-vault create' command.

$ ansible-vault creates a filename.yaml

Then you will receive a command to create a password, and then type it again for confirmation. You will now be able to access a new file, where you can add and edit data.

47. What are the "facts" in the Ansible context?

Recent facts and well-known system variables, found in playbooks, are widely used in the application of conditional contexts. Additionally, they collect ad-hoc system information.

You can find all the facts through this command:

$ ansible all- m setup

48. What is the ad hoc command?

Users start ad hoc commands to start actions on hosts without using a playbook. Think of it as one of the commandments.

49. Explain the difference between a playbook and a game.

A game is a set of tasks that work for hosts managed by one or more. Games contain one or more activities. The playbook contains one or more games.

50. What protocol does Ansible use to communicate with Linux and Windows?

For Linux, the protocol used is SSH.

In Windows, the protocol used is WinRM.

Check this out, Ping command in linux

51. What are the requirements of Ansible Server?

If you are a Windows user, you need to have a virtual machine where Linux should be installed.

Also requires Python version 2.6 or higher.

52. What Is Meant by the Ansible task?

Ansible Task allows us to split the fragment policy pieces into smaller files. These are code blocks that can be used to perform any process automatically.

53. Explain the keywords or concepts in Ansible.

Some of the keywords most commonly used in Ansible, such as

• Control Machine: The Control Machine is used to provide server hosted. This is the machine on which Ansible is installed.
• Inventory: An inventory is a launch file that contains information about the various servers you own.
• Playbook: A code file written in YAML format. The playbook contains tasks that need to be done automatically or done.
• Function: Every task represents one process that needs to be done, e.g., to install a library.
• Module: A module is a set of tasks that can be performed. Ansible has over 100 built-in modules, and you can create custom ones.
• Role: Role is a predefined way to organize playbooks and other files to make sharing and reusing parts of a provision easier.
• Play: Work done from beginning to end, or making a playbook, is called a game.
• Fact: Fact is a global variable that stores information about a system, such as virtual network connections or operating systems.
• Holders: Holders are used to activate a service condition, such as restarting or stopping a service.

54. What are Ad-hoc commands?

Ad-hoc Commands are simple single-line commands used to perform a specific task. You can think of Ad-hoc instructions as another way to write playbooks. An example of an Ad-hoc command, as indicated:

ansible host -m netscaler -a "nsc_host = nsc.example.com user = ansiuser password = antipasti"

The Ad-hoc command above accesses the NetScaler module to disable the server.

55. How can you achieve the flexibility of the first host in the group?

Uses the following instructions to achieve a different host for the first host:

{{hostvars [groups ['webservers'] [0]] ['ansible_eth0'] ['ipv4'] ['address']}}

This command accesses the host machine name of the first machine in the webservers group. If you do this with a template, use jinja2' #set', or you can use set_fact.

56. How can you keep personal data in a playbook?

The following command is used to store verbose output but hides sensitive information from others who would like to see the outcome.

- Name: secret function
shell: / user / drum / do_somthing -value = {{secret value}}
no_log: True
Also, the no_log attribute can apply throughout the game.

- strangers: all
no_log: True

57. What are Ansible Vaults, and why are they used?

Ansible Vault is a feature that lets you keep all your secrets safe. It can encrypt all YAML files, playbooks, or just a few exceptions. It provides a place where you can also integrate sensory data into your playbooks.

Vault is used with file-level granularity, in which files are fully encrypted or encrypted. It uses the same encryption for encrypting and decrypting data, making Ansible vault easier to use.

58. What is the evolutionary nature of the shell in Ansible?

In Ansible, if you want to access the available variables, you must use the 'env' test plugin.

For example, you want to access the amount of Office space in the administrator, as shown in the following command, such as:

---
# ...
vars:
local_home: "{{view ('env', 'Office')}}"
I
{{ansible_env.SOME_VARIABLE}}

59. Who can copy a file repeatedly to the target host?

The "copy" module has a recurring parameter. So, if you want to make the most of many files, then the "synchronize" module is the best way to do this job.

60. How do you set the stage or other dynamic areas of ​​work?

Natural variables can be set using the keyword' location'. It can be set for a specific task or a whole playbook. Follow the following code to see how you set it, such:

environment:
HOW: "{{ansible_env.PATH}}: / thingy / bin"
OTHERS: number

61. What are the benefits of Ansible?

• Ansible has many capabilities, including that:
• It only requires the SSH service running on the targeted machines.
• Python is the only dependency needed, and, fortunately, many programs come pre-installed.
• It requires minimal resources; therefore, there is a low overhead.
• It becomes easy to read and understand as these activities can be written in YAML.
• Unlike other tools, most of which are process-oriented, Ansible is declarative, describes the desired condition, and fulfills the requirements necessary to achieve it.

Must-Read WCF Interview Questions

Advanced Ansible Interview Questions For Experienced Professionals

62. What are tags?

A tag is an attribute that can be set in the Ansible format (games, roles, tasks), and then when using a playbook, you can use tags or skip tags to create a small set of tasks.

63. When we talk about tags, how do you sort tasks?

You can filter tasks in one of two ways:

• Use the tags or skip-tags option in the command line
• In Portable Configuration settings, use the TAGS_RUN and TAGS_SKIP options.

64. What is a handler?

In Ansible, the handle is similar to the normal function but will only work if the function notifies the holder. Holders are automatically loaded by the roles / <role_name> /handler/main.yaml. The catchers will run once after all tasks have been completed in a particular game.

65. How do you evaluate Ansible projects?

There are three test modes available:

1. Asserts- It ensures that your system has reached its intended destination, not just as an analogy, you can find in test mode.  
2. Check Mode- Check mode shows you how everything will work if no simulation is done. Therefore, you can easily see that the project behaves as you want. The check mode does not use scripts and commands in paragraphs and playbooks. You must disable the test mode for specific tasks using “check_mode: no.”
3. Manually Run- Start the game and make sure the system is in the desired condition. This test option is a straightforward method, but carries additional risk because the results in the test site may not vary in the production area.

66. How do you improve Ansible?

Improving Ansible is easy. Just use this command: 

sudo pip install ansible == <version-number>

67. When do you use {{}}?

One of Ansible's basic rules states: "Always use {{}} unless:"

68. Explain how to access the variables of the shell environment.

You can access different versions of the control machine by using the "env" check plugin. For example, to achieve the maximum number of home automation controls, you can enter:

local_home: "{{lokup ('env', 'HOME')}}"

69. How do you keep data confidential in a playbook?

If you want to keep your data private but can share it publicly, use Vault in playbooks. But if you are using -v (verbose) mode and do not want anyone to see results, use:

name: secret function
shell: / usr / bin / do_something --value = {{secret_value}}
no_log: True

70. Explain in detail the ad-hoc instructions.

However, ad-hoc commands are nothing but a command used to do something quickly and are to use one time. In contrast, a playbook is used for repetitive action, which is helpful in a logical environment. But there may be situations where we want to use ad-hoc commands that can do the required work and not repeat functions.

71. What unit tests are available in Ansible?

Unit testing of all modules is available in the .test / units/module. First, you have to set your test location.

72. How does the Ansible synchronize module work?

Ansible synchronize is a rsync-like module for Linux machines that we can use in playbooks. Features are like rsync like archive, press, delete, etc., but there are a few limitations.

• Rsync should be installed on both the source and the target systems
• You need to specify delegate_to to change the source from localhost to another port
• You need to manage the user's permissions as files are accessible by the remote user.
• We should always provide a complete home directory when using sudo. Otherwise, the files will be copied to the remote user's home directory.
• Linux rsync restrictions related to solid links also apply here.
• Enforcing -description updates to avoid a broken state if the connection does not work.

An example of a sync module is

---
- hosts: host-remote tasks:
- name: sync from sync_folder
synchronize:
src: /var/tmp/sync_folder dest: /var/tmp/

Here we transfer the files to the folder

/ var / tmp / sync_folder to the remote / folder / var / tmp folder.

73. Describe the Callback_plugin in Ansible?

 Callbacks are defined as a piece of code in the Ansible environment where to get is used to call a particular event, and notifications are allowed. This is an additional type of developer-related feature and allows for low-level extensions to be able to be loaded from a variety of locations without any problem.

74. How does the Ansible set_fact module differ from vars, vars_file, or include_var?

In Ansible, set_fact is used to set new variable values ​​on a host-by-host basis, similar to the logical realities found in the settings module. These changes are available in the following games in the playbook. In the case of vars, vars_file, or insert_var, we know the value in advance, and if we use set_fact, we can save the agreement after adjusting it over time using certain functions such as applying filters or taking small components of some kind. We can also set up an existing database.

A set_fact variable assignment is done using key-pair values ​​where the key is a variable word, and the value is its function. A simple example will be the same below.

- set_fact:
one_fact: value1
second_fact: value2

75. When is it unsafe to set mass work arguments from a variable?

All work arguments can be typed in a dictionary, which can be helpful in some dynamic duplication situations. However, Ansible issues a warning as it introduces security risks.

vars:
usermod_args:
name: testuser
state: present
update_password: always
tasks:
- user: '{{ usermod_args }}'

In the example above, the values ​​ that are transferred to the variable usermod_args can be written over other malicious matters ​​in real estate domains on the targeted machine. To avoid this:

The precedence should be greater than the facts of the host.

It would help if you disabled the INJECT_FACTS_AS_VARS configuration to prevent actual and variable price conflicts.

76. How to configure the jump host to access servers that can not be directly accessed?

We should set up ProxyCommand on the ansible_ssh_common_args inventory variable. To connect to the appropriate host, the arguments defined in this variable are added to the scp / ssh / sftp command line.

For example, 

[gatewayed]
foo ansible_host=192.0.2.1
bar ansible_host=192.0.2.2

With the following contents, create the group_vars/gatewayed.yml 

ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q user@gateway.example.com"'

When connecting to any hosts in the group gatewayed, Ansible will append these arguments/issues to the command line.

77. What can Ansible do?

Ansible can do the following for us:

• Configuration management
• Application deployment
• Task automation
• IT orchestration

78. Please explain what Ansible Galaxy is.

Ansible Galaxy refers to the Galaxy website where users will be able to share all the roles in CLI (Command Line Interface), where installation, creation, and management of roles take place.

79. Describe the module resources in Ansible.

Ansible offers many different tools that help engineers while developing their modules. Basic.py is a module that provides access to the mainstream library to access and use as a starting point.

80. Please explain what the Red Hat Ansible is.

Ansible and Ansible Tower are at the end of the changing platforms that can offer the following features or functionality:

• Provision
• Deploying applications
• Planning workflow
• Manage IT applications
• IT system configuration
• Networks
• Apps

All of these activities are discussed by Ansible, which can help a business solve real-time business problems.

81. What are the Ansible server requirements?

You need to have a Linux virtual machine with Python 2.6 or a higher version.

82. How to install Ansible on CentOS?

Step 1: Update your Control Node

yum update

Step 2: Install the EPEL Repository

yum filed epel-release

Step 3: Install Ansible

yum install Ansible

83. How to connect to other devices within Ansible?

Once Ansible is installed and the basic setup is complete, a list of names is created.

 This can be basic, and one can begin to evaluate accordingly. To connect to a different device, you must use the "Ping module." This can be used as an easy way to test a connection.

Ansible - m ping all.

84. Can you build your modules with Ansible?

Yes, we can build or have modules within Ansible.

It is an open-source tool that works primarily on Python. If you can edit in Python, you can start creating your modules within a few hours from the start, and you do not need to have the same prior knowledge.

85. What does Fact in Ansible mean?

The word "Facts" is often used in a logical context. They are described in the playbook areas, which show the known and discovered variables of the system. The facts are used to apply conditional practices and obtain ad-hoc information.

You can see all the facts by

$ ansible all- m setup

So if you want to extract only part of the information, you can use the "setup" module, where you will have the option to filter out and just find the truth you need.

86. What is ask_pass in Ansible?

Ask_pass is managed in an Ansible Playbook.

This controls whether the ansible-playbook automatically commands the password. Generally, the default behavior is not:

It is always set to ask_pass = True.

If you use SSH keys for authentication purposes, you do not need to change this setting.

87. Explain what ask_sudo_pass is.

Ask_sudo_pass manages an Ansible Playbook to reset Sudo's password. Generally, the default behavior is not:

ask_sudo_pass = True

One has to confirm and change this setting when Sudo passwords are enabled, most of the time.

88. Explain what is ask_vault_pass?

The ask_vault_pass is an Ansible command-line option used to prompt the user for the password to decrypt Vault-encrypted files. It ensures that sensitive information stored in encrypted files remains secure and requires user input for decryption during playbook execution.

89. Explain the Module utilities in Ansible.

Module utilities in Ansible are a collection of tools and functions that provide additional functionality for working with Ansible modules. These utilities include modules for handling file manipulation, string manipulation, system operations, data transformations, and more. They enhance the capabilities of Ansible modules, allowing for more efficient and flexible automation tasks.

90. Explain the types of modules in Ansible?

In Ansible, modules are reusable units of code that perform specific tasks on target hosts. They are the building blocks of Ansible playbooks and provide a wide range of functionality to automate tasks.

The following are the types of modules in Ansible:-

• Core Modules: These are included with Ansible by default and cover many system administration and automation tasks. For example, ansible.builtin.file, ansible. builtin.copy, ansible.builtin.shell, and ansible.builtin.service.
   
• Community Modules: These modules are contributed by the Ansible community and can be used to extend Ansible's functionality. They cover many use cases, including cloud providers, databases, and network devices.
   
• Custom Modules: You can create custom Ansible modules to flexibly automate specialized tasks that are unique to a specific environment.

Frequently Asked Questions

How do I prepare for an Ansible interview?

Prepare by understanding Ansible concepts, practicing common tasks, and being familiar with playbooks, modules, and roles. Review real-world scenarios and Ansible best practices.

What is Ansible, and used for?

Ansible is an open-source automation tool used for configuration management, application deployment, task automation, and infrastructure orchestration. It simplifies complex tasks and ensures consistency in IT environments.

How many core modules do we have in Ansible?

Ansible has numerous core modules covering diverse tasks, including system administration, cloud management, network devices, and more. The number of modules continues to expand with updates.

What is the main use case of Ansible?

Ansible is commonly used for automating repetitive tasks in IT infrastructure. Its main use cases include configuration management, application deployment, cloud provisioning, and managing infrastructure as code.

How is Ansible used in DevOps?

Ansible is used in DevOps to automate infrastructure provisioning, configuration management, application deployment, and orchestration. It simplifies complex tasks, ensures consistency across environments, and enhances collaboration between development and operations teams.

Is Ansible CI or CD?

Ansible is primarily a tool for Continuous Delivery (CD) and Continuous Deployment. It automates the deployment process, but it can be integrated into Continuous Integration (CI) pipelines to streamline the overall DevOps workflow.

Why is YAML used in Ansible?

YAML is used in Ansible because it is human-readable, easy to write, and simple to understand. It allows for clear definition of automation tasks, making playbooks and configuration files more maintainable and accessible for both developers and operations teams.

Conclusion

We have extensively discussed the Ansible interview questions with answers through this article in detail. After reading about the Ansible interview questions, are you not feeling excited to read/explore more articles on the topic of file systems? Don't worry; Coding Ninjas has you covered.  

Recommended Reading:

• Selenium Interview Questions
• Javascript interview questions
• SAP FICO Interview Questions 
• Ansible YAML Basics
• Ansible - Roles