1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
|
#compdef ansible ansible-config ansible-console ansible-doc ansible-galaxy ansible-inventory ansible-playbook ansible-pull ansible-vault -value-,ANSIBLE_STDOUT_CALLBACK,-default-
local curcontext="$curcontext" plug plugvar ign ret=1
local -a args state line
local -A opt_args
case $service in
*,ANSIBLE_STDOUT_CALLBACK,*)
plug=callback
state=plugins
;;
ansible|ansible-console|ansible-doc|ansible-playbook)
args=(
\*{-M+,--module-path=}'[specify path to modules]:module path:_dir_list'
)
;|
ansible|ansible-console|ansible-playbook|ansible-pull)
args+=(
'(-K --ask-become-pass)'{-K,--ask-become-pass}'[ask for privilege escalation password]'
'(-k --ask-pass)'{-k,--ask-pass}'[ask for connection password]'
'(-T --timeout)'{-T+,--timeout=}'[override the connection timeout]:timeout (seconds) [10]'
'(-c --connection)'{-c+,--connection=}'[specify connection type]:connection type [smart]:->connect-types'
'(-u --user)'{-u+,--user=}'[specify remote user for connection]:remote user:_users'
'--private-key=[specify file to use to authenticate the connection]:private key file:_files'
'--ssh-common-args=[specify common arguments to pass to sftp/scp/ssh]:ssh option'
'--sftp-extra-args=[specify extra arguments to pass to sftp]:sftp option'
'--scp-extra-args=[specify extra arguments to pass to scp]:scp option'
'--ssh-extra-args=[specify extra arguments to pass to ssh]:ssh option'
)
;|
ansible|ansible-console|ansible-playbook)
args+=(
'(-C --check)'{-C,--check}"[don't make any changes]"
'(-D --diff)'{-D,--diff}'[show differences when changing small files and templates]'
'(-b --become)'{-b,--become}'[escalate privileges on remote system]'
'(-f --forks)'{-f+,--forks=}'[specify number of parallel processes to use]:processes [5]'
'--become-method=[specify privilege escalation method to use]:method [sudo]:(sesu sudo su pbrun pfexec doas dzdo ksu runas pmrun enable machinectl)'
'--become-user=[specify remote user for running operations]:user:_users'
"--syntax-check[perform a syntax check on the playbook, but don't execute it]"
'!(-R --su-user -U --sudo-user)'{-R,-U,--su-user,--sudo-user}':user [root]:_users'
)
;|
ansible|ansible-console|ansible-inventory|ansible-playbook|ansible-pull|ansible-vault)
args+=(
'--ask-vault-pass[ask for vault password]'
'--vault-id=[specify vault identity to use]:vault identity'
'--vault-password-file=[specify vault password file]:vault password file:_files'
)
;|
ansible|ansible-console|ansible-inventory|ansible-playbook|ansible-pull)
args+=(
\*{-i+,--inventory=}'[specify inventory host file or host list]: : _alternative "files\:inventory file\:_files"
"hosts\:host\: _sequence _hosts"'
'!(-i --inventory)--inventory-file=:inventory file:_files'
)
;|
ansible|ansible-console|ansible-playbook|ansible-pull)
args+=(
'--list-hosts[output list of matching hosts]'
'(-l --limit)'{-l+,--limit=}'[further limit hosts to an additional pattern]:host subset:->hosts'
)
;|
ansible|ansible-playbook|ansible-pull)
args+=(
'(-e --extra-vars)'{-e+,--extra-vars=}'[set additional variables]:key=value or YAML/JSON'
)
;|
ansible|ansible-console|ansible-inventory)
args+=(
'--playbook-dir=[specify substitute playbook directory]:directory:_directories'
)
;|
ansible-playbook|ansible-pull)
args+=(
'(-t --tags)'{-t,--tags}'[only run plays and tasks tagged with these values]'
"--skip-tags[only run plays and tasks whose tags don't match]"
)
;|
ansible)
args+=(
'(-a --args)'{-a+,--args=}'[specify command or module arguments]:arguments:->args'
'(-B --background)'{-B+,--background=}'[run asynchronously, failing after specified time]:fail timeout (seconds)'
'(-m --module-name)'{-m+,--module-name=}'[specify module]:module:->plugins'
'(-o --one-line)'{-o,--one-line}'[condense output]'
'(-P --poll)'{-P+,--poll=}'[specify the poll interval if using -B]:interval (seconds) [15]'
'(-t --tree)'{-t+,--tree=}'[specify directory for log output]:directory:_directories'
'--output[output file name for encrypt or decrypt; use - for stdout]:output file:_files'
':host:->hosts'
)
;;
ansible-config)
args+=(
'(-c --config)'{-c+,--config=}'[specify configuration file]:config file:_files'
'1:action:((
list\:list\ all\ configuration
dump\:show\ the\ current\ settings,\ merge\ specified\ configuration
view\:display\ the\ current\ config\ file
))'
)
[[ -n $words[(r)dump] ]] && args+=( '--only-changed[only show configuration that is changed from the default]' )
;;
ansible-console)
args+=(
'--step[one-step-at-a-time: confirm each task before running]'
)
;;
ansible-doc)
args+=(
'!(-l --list -F --list_files -s --snippet)'{-j,--json} # "internal testing only"
'(-l --list -F --list_files -s --snippet)'{-l,--list}'[list available plugins]'
'(-l --list -F --list_files -s --snippet)'{-F,--list_files}'[show plugin names and their source files without summaries]'
'(-l --list -F --list_files -s --snippet)'{-s,--snippet}'[show playbook snippet for specified plugins]'
'(-t --type)'{-t+,--type=}'[choose plugin type]:plugin type [module]:(become cache callback cliconf connection httpapi inventory lookup shell module strategy vars)'
'*:plugin:->plugins'
)
;;
ansible-inventory)
args+=(
'--export[when doing an --list, represent in a way that is optimized for export]'
'(-y --yaml)--graph[output inventory graph]'
'--host[output specific host information]'
'--output=[with --list, specify output file]:file:_files'
'--list[output all hosts information]'
'(-y --yaml --vars --graph)--toml[use TOML format instead of JSON]'
'(-y --yaml)--vars[add variables to the graph display]'
'(-y --yaml --toml --vars --graph)'{-y,--yaml}'[use YAML format instead of JSON]'
)
;;
ansible-galaxy)
args+=( -A "-*" $args
'--list[list integrations]'
'(-c --ignore-certs)'{-c,--ignore-certs}'[ignore SSL certificate validation errors]'
'(-s --server)'{-s+,--server=}'[specify API server destination]:server destination'
'--remove=[remove integration]:integration id'
'1:action:(delete import info init install list login remove search setup)'
'*::args:->galaxy'
)
;;
ansible-playbook)
args+=(
'--flush-cache[clear the fact cache for every host in inventory]'
'--force-handlers[run handlers even if a task fails]'
'--list-tags[list all available tags]'
'--list-tasks[list all tasks that would be executed]'
'--start-at-task=[start the playbook at specified task]:task'
'--key-file=[specify file to use to authenticate the connection]:private key file:_files'
'*:playbook:_files -g "(#i)*.y(|a)ml"'
)
;;
ansible-pull)
args+=(
"--check[don't make any changes]"
'--diff[show the differences in changed files]'
'(-d --directory)'{-d+,--directory=}'[specify directory to checkout repository to]:directory:_directories'
'--full[do a full instead of a shallow clone]'
'(-m --module-name)'{-m+,--module-name=}'[specify repository module used for checking out repository]:module:(git subversion hg bzr)'
'--accept-host-key[adds the hostkey for the repo url if not already added]'
'--purge[purge checkout after playbook run]'
'(-f --force)'{-f,--force}'[run the playbook even if the repository could not be updated]'
'(-C --checkout)'{-C,--checkout}'[specify branch/tag/commit to checkout]:branch/tag/commit'
'--track-subs[submodules will track the latest changes]'
'(-o --only-if-changed)'{-o,--only-if-changed}'[only run the playbook if the repository has been updated]'
'(-s --sleep)'{-s+,--sleep=}'[delay for random duration before starting]:max delay (seconds)'
'(-U --url)'{-U+,--url=}'[specify URL of the playbook repository]:url:_urls'
'--verify-commit[verify GPG signature of checked out commit]'
'*:playbook:_files -g "(#i)*.y(|a)ml"'
)
;;
ansible-vault)
args=( -A "-*" $args
'::action:(create decrypt edit encrypt encrypt_string rekey view)'
'--new-vault-id=[specify new vault identity to use for rekey]:vault id'
'--new-vault-password-file=[specify new vault password file to use for rekey]:file:_files'
'*::args:->vault'
)
;;
esac
(( $#words > 2 )) && ign='!'
if (( $#args )); then
_arguments -s -S -C $args \
"${ign}(- :)--version[display version information, config and module locations]" \
"${ign}(- :)"{-h,--help}'[display usage information]' \
\*{-v,--verbose}"[verbose mode (repeat to increase)]" && ret=0
plug=${(v)opt_args[(i)-(t|-type)]:-module}
fi
case $state in
args)
case ${(v)opt_args[(I)-(m|module)]} in
*) # shell, command or no module specified
_cmdstring && ret=0
;;
esac
;;
hosts)
local alts
[[ -prefix - ]] && return ret
compset -P '*[,:](|[&!~])'
compset -S '[:,]*'
if compset -P '@'; then
_files && ret=0
else
local -a inventory
typeset -ga _ansible_hosts _ansible_groups
if (( !$#_ansible_hosts || !$#_ansible_groups )); then
inventory=( ${(f)"$(_call_program groups ansible-inventory --graph)"} )
_ansible_hosts=( ${${(M)inventory%--[^:]#}#--} )
_ansible_groups=( ${${${(M)inventory%@*:}%:}#@} )
fi
[[ $IPREFIX = *[:,] ]] &&
alts=( 'operators:operator:_values -S "" operator "![exclude hosts]" "&[intersection of hosts]" "~[regular expression pattern]"' )
_alternative $alts \
'groups:group:compadd -qS: -a _ansible_groups' \
'hosts:host:compadd -qS: -a _ansible_hosts' && ret=0
fi
;;
connect-types)
plug=connection
;&
plugins)
plugvar=_ansible_${plug}_plugins
typeset -ga ${plug}
if zstyle -T ":completion:${curcontext}:plugins" verbose; then
(( ${(P)#plugvar} )) || set -A ${plugvar} \
${${(f)"$(_call_program plugins ansible-doc -t $plug -l)"}/ ##/:}
_describe -t plugins "${plug} plugin" $plugvar && ret=0
else
(( ${(P)#plugvar} )) || set -A ${plugvar} \
${${(f)"$(_call_program plugins ansible-doc -t $plug -F)"}%% *}
_wanted plugins expl "${plug} plugin" compadd -a $plugvar && ret=0
fi
;;
galaxy)
ign=''
curcontext="${curcontext%:*}-${line[1]}:"
(( $#words > 2 )) && ign='!'
args=(
"${ign}(-)"{-h,--help}'[display usage information]'
'(-c --ignore-certs)'{-c,--ignore-certs}'[ignore SSL certificate validation errors]'
'(-s --server)'{-s+,--server=}'[specify API server destination]:server:_hosts'
{-v,--verbose}'[verbose mode]'
)
case $line[1] in
info|search|list|remove|install)
args+=( '(-p --roles-path)'{-p,--roles-path}'[specify location of roles]:path:_directories' )
;|
info|init)
args+=( "--offline[don't query the galaxy API]" )
;|
init|install)
args+=( '(-f --force)'{-f,--force}'[force overwriting an existing role]' )
;|
search)
args+=(
'--author=[specify GitHub username]:username'
'--galaxy-tags=[specify list of galaxy tags to filter by]:galaxy tags'
'--platforms=[specify list of OS platforms to filter by]:platforms'
'*: :_guard "^-*" "search term"'
)
;;
setup)
args+=(
'--list[list integrations]'
'--remove=[remove integration]:integration id'
)
;;
init)
args+=(
'--init-path=[specify path in which the skeleton role will be created]:path:_directories'
'--role-skeleton=[specify path to a role skeleton that the new role should be based upon]'
'--type=[initialize using an alternate role type]:role type:(container apb network)'
)
;;
install)
args+=(
"--force-with-deps[force overwriting an existing role and it's dependencies]"
'(-n --no-deps)'{-n,--no-deps}"[don’t download roles listed as dependencies]"
'(-i --ignore-errors)'{-i,--ignore-errors}'[ignore errors and continue with the next specified role]'
'(-g --keep-scm-meta)'{-g,--keep-scm-meta}'[use tar instead of the scm archive option when packaging the role]'
'(-r --role-file)'{-r+,--role-file=}'[specify file containing a list of roles to be imported]:file:_files'
)
;;
import)
args+=(
'--status[check the status of the most recent import request for given github_user/github_repo]'
"--no-wait[don’t wait for import results]"
'--branch=[specify branch to import]:branch'
'--role-name=[specify name the role should have]:role'
)
;;
login)
args+=(
'--github-token=[identify with github token rather than username and password]'
)
;;
esac
_arguments -s -S $args && ret=0
;;
vault)
curcontext="${curcontext%:*}-${line[1]}:"
args=()
case $line[1] in
encrypt*|edit|rekey)
args+=(
'--encrypt-vault-id=[specify vault id to use to encrypt (required if more than one vault-id is provided)]:vault id'
)
;|
(de|en)crypt*) args=( '--output=[specify output file name]:file:_files' ) ;|
encrypt_string)
args+=(
'(-p --prompt)'{-p,--prompt}'[prompt for the string to encrypt]'
'(-n --name)'{-n+,--name=}'[specify the variable name]:variable'
'--stdin-name=[specify the variable name for stdin]:variable'
)
;|
create|edit|rekey|view) args+=( ':file:_files' ) ;|
(en|de)crypt) args+=( '::file:_files' )
;;
esac
_arguments -s -S $args && ret=0
;;
esac
return ret
|