Accessing external data
Data for role variables, play variables, and task variables can also come from external sources. Ansible provides a mechanism in which to access and evaluate data from the control machine (that is, the machine running ansible-playbook
). The mechanism is called a lookup plugin, and a number of them come with Ansible. These plugins can be used to look up or access data by reading files, generate and locally store passwords on the Ansible host for later reuse, evaluate environment variables, pipe data in from executables or CSV files, access data in the Redis
or etcd
systems, render data from template files, query dnstxt
records, and more. The syntax is as follows:
lookup('<plugin_name>', 'plugin_argument')
For example, to use the mastery
value from etcd
in an ansible.builtin.debug
task, execute the following command:
- name: show data from etcd ansible.builtin.debug: msg: "{{ lookup('etcd', 'mastery') }}"
Lookups are evaluated when the task referencing them is executed, which allows for dynamic data discovery. To reuse a particular lookup in multiple tasks and reevaluate it each time, a playbook variable can be defined with a lookup value. Each time the playbook variable is referenced, the lookup will be executed, potentially providing different values over time.