Ansible Best Practices: All web servers lost their SSL cert paths
на канале: TheCodeForge
All web servers lost their SSL cert paths — a new role's default `cert_path` collided with `group_vars` via precedence. Root cause: Role `defaults/main.yml` `cert_path` overrode `group_vars` unexpectedly. The fix: Namespace role vars (`role_` prefix); structure to avoid precedence clashes.
A production war story from the TheCodeForge Ansible series — the incident, why it happened, and the exact fix.
⏳ Timestamps:
0:00 - Cold open: All web servers lost their SSL certificate paths; sites down with 'certificate not found' errors.
0:12 - Intro
0:20 - What Is Ansible Structure?
0:37 - Why Flat Playbooks Fail
1:02 - Official Directory Layout
1:27 - ansible.cfg Settings
1:40 - Variable Precedence Order
2:03 - Designing Good Roles
2:28 - Inventory Organization
2:54 - Playbook as Orchestrator
3:14 - Secrets Management
3:35 - Testing and CI Pipeline
4:00 - All web servers lost their SSL certificate paths; sites down with 'certificate not found' errors.
4:23 - Variable precedence override
4:38 - The Fix
4:53 - ⚠ Gotcha: Defining same variable in three places
5:09 - ⚠ Gotcha: Passing secrets via -e on command line
5:18 - ⚠ Gotcha: Hardcoding values in tasks instead of variables
5:30 - Version Compatibility Caveat
6:05 - Production Caveat: Idempotency
6:21 - Debugging Guide
6:35 - Interview Questions
7:01 - FAQ
7:23 - Key Takeaways
7:37 - Next up
7:50 - Wrap-up
👉 Full article + code: https://thecodeforge.io/devops/ansibl...
⏭ Next up: Ansible Ad-Hoc Commands Guide
#ansible #devops #automation