Creating Ansible Playbooks
Overview
Generate production-ready Ansible playbooks, roles, and inventories for infrastructure automation. Supports provisioning servers, deploying applications, configuring services, and enforcing desired state across fleets of machines using SSH-based agentless automation.
Prerequisites
- Ansible 2.14+ installed (
ansible --version)
- SSH access to target hosts with key-based authentication
- Python 3.9+ on control node and managed nodes
- Inventory of target hosts (IPs or hostnames)
- Privilege escalation credentials (sudo) if configuring system-level resources
ansible-lint installed for playbook validation
Instructions
- Scan the project for existing Ansible files (
ansible.cfg, inventory/, roles/, group_vars/) to understand current structure
- Determine the automation target: server provisioning, application deployment, configuration management, or security hardening
- Create the playbook YAML with proper structure:
hosts, become, vars, tasks, handlers
- Extract reusable logic into roles using the standard directory layout (
tasks/, handlers/, templates/, defaults/, vars/, meta/)
- Define variables in
group_vars/ and host_vars/ for environment-specific values, keeping secrets in vault-encrypted files
- Use Jinja2 templates for configuration files that vary across environments
- Add handlers for service restarts triggered by configuration changes
- Validate the playbook with
ansible-lint and ansible-playbook --check --diff (dry run)
- Test idempotency by running the playbook twice and confirming no changes on the second run
Output
- Ansible playbooks (
.yml) with structured tasks, handlers, and variables
- Role directories following Ansible Galaxy structure
- Jinja2 templates (
.j2) for dynamic configuration files
- Inventory files (INI or YAML) with host groups
group_vars/ and host_vars/ for environment separationansible.cfg with connection and privilege escalation settings
Error Handling
| Error |
Cause |
Solution |
unreachable: Failed to connect to host |
SSH connection failure or wrong host/port |
Verify SSH keys, host IPs, and that port 22 is open with ansible -m ping |
permission denied on become |
Missing or incorrect sudo password |
Add --ask-become-pass or configure ansible_become_password in vault |
undefined variable |
Variable not defined in vars, defaults, or inventory |
Check variable precedence; define in defaults/main.yml or group_vars/ |
ansible-lint: syntax-check failed |
YAML syntax error or deprecated module usage |
Run ansible-lint -v and fix reported issues; replace deprecated modules |
changed on every run (not idempotent) |
Using command/shell without creates/removes guards |
Add creates: parameter or switch to purpose-built modules (copy, template, file) |
Examples
- "Create an Ansible playbook to provision an Ubuntu 22.04 server with Nginx, Certbot, and a firewall allowing only 80/443."
- "Generate a role that deploys a Python Flask app with Gunicorn, systemd service file, and log rotation."
- "Write an Ansible playbook to harden SSH config across all servers: disable root login, enforce key auth, set idle timeout."
Resources
Source: jeremylongshore/claude-code-plugins-plus-skills → skills/.curated/creating-ansible-playbooks/SKILL.md
Also appears in: jeremylongshore/claude-code-plugins-plus-skills/plugins/devops/ansible-playbook-creator/skills/creating-ansible-playbooks/SKILL.md
1---2name: creating-ansible-playbooks3description: 'Execute use when you need to work with Ansible automation. This skill provides Ansible playbook creation with comprehensive guidance and automation. Trigger with phrases like "create Ansible playbook", "automate with Ansible", or "configure with Ansible". '4---56# Creating Ansible Playbooks78## Overview910Generate production-ready Ansible playbooks, roles, and inventories for infrastructure automation. Supports provisioning servers, deploying applications, configuring services, and enforcing desired state across fleets of machines using SSH-based agentless automation.1112## Prerequisites1314- Ansible 2.14+ installed (`ansible --version`)15- SSH access to target hosts with key-based authentication16- Python 3.9+ on control node and managed nodes17- Inventory of target hosts (IPs or hostnames)18- Privilege escalation credentials (sudo) if configuring system-level resources19- `ansible-lint` installed for playbook validation2021## Instructions22231. Scan the project for existing Ansible files (`ansible.cfg`, `inventory/`, `roles/`, `group_vars/`) to understand current structure242. Determine the automation target: server provisioning, application deployment, configuration management, or security hardening253. Create the playbook YAML with proper structure: `hosts`, `become`, `vars`, `tasks`, `handlers`264. Extract reusable logic into roles using the standard directory layout (`tasks/`, `handlers/`, `templates/`, `defaults/`, `vars/`, `meta/`)275. Define variables in `group_vars/` and `host_vars/` for environment-specific values, keeping secrets in `vault`-encrypted files286. Use Jinja2 templates for configuration files that vary across environments297. Add handlers for service restarts triggered by configuration changes308. Validate the playbook with `ansible-lint` and `ansible-playbook --check --diff` (dry run)319. Test idempotency by running the playbook twice and confirming no changes on the second run3233## Output3435- Ansible playbooks (`.yml`) with structured tasks, handlers, and variables36- Role directories following Ansible Galaxy structure37- Jinja2 templates (`.j2`) for dynamic configuration files38- Inventory files (INI or YAML) with host groups39- `group_vars/` and `host_vars/` for environment separation40- `ansible.cfg` with connection and privilege escalation settings4142## Error Handling4344| Error | Cause | Solution |45|-------|-------|---------|46| `unreachable: Failed to connect to host` | SSH connection failure or wrong host/port | Verify SSH keys, host IPs, and that port 22 is open with `ansible -m ping` |47| `permission denied` on become | Missing or incorrect sudo password | Add `--ask-become-pass` or configure `ansible_become_password` in vault |48| `undefined variable` | Variable not defined in vars, defaults, or inventory | Check variable precedence; define in `defaults/main.yml` or `group_vars/` |49| `ansible-lint: syntax-check failed` | YAML syntax error or deprecated module usage | Run `ansible-lint -v` and fix reported issues; replace deprecated modules |50| `changed` on every run (not idempotent) | Using `command`/`shell` without `creates`/`removes` guards | Add `creates:` parameter or switch to purpose-built modules (`copy`, `template`, `file`) |5152## Examples5354- "Create an Ansible playbook to provision an Ubuntu 22.04 server with Nginx, Certbot, and a firewall allowing only 80/443."55- "Generate a role that deploys a Python Flask app with Gunicorn, systemd service file, and log rotation."56- "Write an Ansible playbook to harden SSH config across all servers: disable root login, enforce key auth, set idle timeout."5758## Resources5960- Ansible documentation: https://docs.ansible.com/ansible/latest/61- Ansible Galaxy roles: https://galaxy.ansible.com/62- Ansible Lint rules: https://ansible.readthedocs.io/projects/lint/rules/63- Best practices guide: https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html6465---6667**Source:** [`jeremylongshore/claude-code-plugins-plus-skills`](https://github.com/jeremylongshore/claude-code-plugins-plus-skills) → `skills/.curated/creating-ansible-playbooks/SKILL.md`6869**Also appears in:** `jeremylongshore/claude-code-plugins-plus-skills/plugins/devops/ansible-playbook-creator/skills/creating-ansible-playbooks/SKILL.md`
thedixitjain