Patterns: targeting hosts and groups

When you execute Ansible through an ad-hoc command or by running a playbook, you must choose which managed nodes or groups you want to execute against. Patterns let you run commands and playbooks against specific hosts and/or groups in your inventory. An Ansible pattern can refer to a single host, an IP address, an inventory group, a set of groups, or all hosts in your inventory. Patterns are highly flexible - you can exclude or require subsets of hosts, use wildcards or regular expressions, and more. Ansible executes on all inventory hosts included in the pattern.

Using patterns

You use a pattern almost any time you execute an ad-hoc command or a playbook. The pattern is the only element of an ad-hoc command that has no flag. It is usually the second element:

  1. ansible <pattern> -m <module_name> -a "<module options>""

For example:

  1. ansible webservers -m service -a "name=httpd state=restarted"

In a playbook the pattern is the content of the hosts: line for each play:

  1. - name: <play_name>
  2.   hosts: <pattern>

For example:

  1. - name: restart webservers
  2.   hosts: webservers

Since you often want to run a command or playbook against multiple hosts at once, patterns often refer to inventory groups. Both the ad-hoc command and the playbook above will execute against all machines in the webservers group.

Common patterns

This table lists common patterns for targeting inventory hosts and groups.

DescriptionPattern(s)Targets
All hostsall (or *)
One hosthost1
Multiple hostshost1:host2 (or host1,host2)
One groupwebservers
Multiple groupswebservers:dbserversall hosts in webservers plus all hosts in dbservers
Excluding groupswebservers:!atlantaall hosts in webservers except those in atlanta
Intersection of groupswebservers:&stagingany hosts in webservers that are also in staging

Note

You can use either a comma (,) or a colon (:) to separate a list of hosts. The comma is preferred when dealing with ranges and IPv6 addresses.

Once you know the basic patterns, you can combine them. This example:

  1. webservers:dbservers:&staging:!phoenix

targets all machines in the groups ‘webservers’ and ‘dbservers’ that are also inthe group ‘staging’, except any machines in the group ‘phoenix’.

You can use wildcard patterns with FQDNs or IP addresses, as long as the hosts are named in your inventory by FQDN or IP address:

  1. 192.0.\*
  2. \*.example.com
  3. \*.com

You can mix wildcard patterns and groups at the same time:

  1. one*.com:dbservers

Limitations of patterns

Patterns depend on inventory. If a host or group is not listed in your inventory, you cannot use a pattern to target it. If your pattern includes an IP address or hostname that does not appear in your inventory, you will see an error like this:

  1. [WARNING]: No inventory was parsed, only implicit localhost is available
  2. [WARNING]: Could not match supplied host pattern, ignoring: *.not_in_inventory.com

Your pattern must match your inventory syntax. If you define a host as an alias:

  1. atlanta:
  2.   host1:
  3.     http_port: 80
  4.     maxRequestsPerChild: 808
  5.     host: 127.0.0.2

you must use the alias in your pattern. In the example above, your must use host1 in your pattern. If you use the IP address, you will once again get the error:

  1. [WARNING]: Could not match supplied host pattern, ignoring: 127.0.0.2

Advanced pattern options

The common patterns described above will meet most of your needs, but Ansible offers several other ways to define the hosts and groups you want to target.

Using variables in patterns

You can use variables to enable passing group specifiers via the -e argument to ansible-playbook:

  1. webservers:!{{ excluded }}:&{{ required }}

Using group position in patterns

You can define a host or subset of hosts by its position in a group. For example, given the following group:

  1. [webservers]
  2. cobweb
  3. webbing
  4. weber

you can use subscripts to select individual hosts or ranges within the webservers group:

  1. webservers[0]       # == cobweb
  2. webservers[-1]      # == weber
  3. webservers[0:2]     # == webservers[0],webservers[1]
  4.                     # == cobweb,webbing
  5. webservers[1:]      # == webbing,weber
  6. webservers[:3]      # == cobweb,webbing,weber

Using regexes in patterns

You can specify a pattern as a regular expression by starting the pattern with ~:

  1. ~(web|db).*\.example\.com

Patterns and ansible-playbook flags

You can change the behavior of the patterns defined in playbooks using command-line options. For example, you can run a playbook that defines hosts: all on a single host by specifying -i 127.0.0.2,. This works even if the host you target is not defined in your inventory. You can also limit the hosts you target on a particular run with the —limit flag:

  1. ansible-playbook site.yml --limit datacenter2

Finally, you can use —limit to read the list of hosts from a file by prefixing the file name with @:

  1. ansible-playbook site.yml --limit @retry_hosts.txt

To apply your knowledge of patterns with Ansible commands and playbooks, read Introduction to ad-hoc commands and About Playbooks.

See also