121 lines
4.6 KiB
YAML
121 lines
4.6 KiB
YAML
---
|
|
- name: Windows Update Installation from Assessment Report
|
|
hosts: windows
|
|
gather_facts: no
|
|
tasks:
|
|
- name: Get current timestamp
|
|
set_fact:
|
|
current_timestamp: "{{ lookup('pipe', 'date +%Y-%m-%dT%H:%M:%S') }}"
|
|
|
|
- name: Check if KB updates report file exists
|
|
win_stat:
|
|
path: 'C:\Temp\windows_updates_with_kb.txt'
|
|
register: kb_updates_file
|
|
|
|
- name: Fail if updates report file is missing
|
|
fail:
|
|
msg: 'KB updates report file not found at C:\Temp\windows_updates_with_kb.txt. Please run the assessment playbook first.'
|
|
when: not kb_updates_file.stat.exists
|
|
|
|
- name: Read KB updates report content
|
|
win_shell: Get-Content -Path 'C:\Temp\windows_updates_with_kb.txt'
|
|
register: updates_content
|
|
when: kb_updates_file.stat.exists
|
|
|
|
- name: Extract KB numbers from report file
|
|
set_fact:
|
|
kb_numbers: "{{ updates_content.stdout_lines | select('match', '.*KB: .*') | map('regex_replace', '.*KB: ([0-9,\\s]+).*', '\\1') | map('split', ',') | flatten | map('trim') | select('match', '^[0-9]+$') | list | unique }}"
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- updates_content.stdout_lines is defined
|
|
|
|
- name: Display KB numbers to be installed
|
|
debug:
|
|
msg:
|
|
- "Found {{ kb_numbers | length }} unique KB numbers to install:"
|
|
- "{{ kb_numbers | join(', ') }}"
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- kb_numbers is defined
|
|
- kb_numbers | length > 0
|
|
|
|
- name: Install Windows updates by KB numbers
|
|
win_updates:
|
|
category_names: '*'
|
|
state: installed
|
|
accept_list: "{{ kb_numbers }}"
|
|
log_path: 'C:\Temp\windows_update_installation.log'
|
|
register: installation_result
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- kb_numbers is defined
|
|
- kb_numbers | length > 0
|
|
|
|
- name: Display installation summary
|
|
debug:
|
|
msg:
|
|
- "=== WINDOWS UPDATE INSTALLATION COMPLETE ==="
|
|
- "Host: {{ inventory_hostname }}"
|
|
- "Updates Found: {{ installation_result.found_update_count | default(0) }}"
|
|
- "Updates Installed: {{ installation_result.installed_update_count | default(0) }}"
|
|
- "Updates Failed: {{ installation_result.failed_update_count | default(0) }}"
|
|
- "Reboot Required: {{ 'Yes' if installation_result.reboot_required | default(false) else 'No' }}"
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- kb_numbers is defined
|
|
- kb_numbers | length > 0
|
|
- installation_result is defined
|
|
|
|
- name: Reboot if required
|
|
win_reboot:
|
|
reboot_timeout: 1800
|
|
when: installation_result.reboot_required | default(false)
|
|
|
|
- name: Create installation report
|
|
set_fact:
|
|
installation_summary: |
|
|
Windows Update Installation Report
|
|
=================================
|
|
Host: {{ inventory_hostname }}
|
|
Date: {{ current_timestamp }}
|
|
|
|
Summary:
|
|
--------
|
|
Total Updates Found: {{ installation_result.found_update_count | default(0) }}
|
|
Successfully Installed: {{ installation_result.installed_update_count | default(0) }}
|
|
Failed Installations: {{ installation_result.failed_update_count | default(0) }}
|
|
Reboot Required: {{ installation_result.reboot_required | default('No') }}
|
|
|
|
Requested KB Numbers: {{ kb_numbers | join(', ') }}
|
|
|
|
{% if installation_result.updates is defined %}
|
|
Installed Updates:
|
|
-----------------
|
|
{% for update_id, update_info in installation_result.updates.items() %}
|
|
- {{ update_info.title }}
|
|
KB: {{ update_info.kb | join(', ') if update_info.kb else 'None' }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- kb_numbers is defined
|
|
- kb_numbers | length > 0
|
|
- installation_result is defined
|
|
|
|
- name: Save installation report to file
|
|
win_copy:
|
|
content: "{{ installation_summary }}"
|
|
dest: 'C:\Temp\windows_update_installation_report.txt'
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- kb_numbers is defined
|
|
- kb_numbers | length > 0
|
|
- installation_result is defined
|
|
- installation_summary is defined
|
|
|
|
- name: Give a report when no KB numbers were found on updates
|
|
debug:
|
|
msg: "No valid KB numbers found in the updates report file. Please verify the assessment report."
|
|
when:
|
|
- kb_updates_file.stat.exists
|
|
- (kb_numbers is not defined or kb_numbers | length == 0) |