使用 Ansible 循环创建多个用户:未定义的错误

Question

我使用以下ansible代码创建多个 unix 用户帐户

--- - hosts: test become: true tasks: - name: more complex items to add several users user: name: "{{ item.name }}" uid: "{{ item.uid }}" groups: "{{ item.groups }}" state: present with_items: "{{ user_details }}"

我通过使用单独的变量文件存储用户信息，如下所示

`cat /etc/ansible/vars.yml
---
user_details:
- { name: testuser1, uid: 1002, groups: "admin, logs" }
- { name: testuser2, uid: 1003, groups: logs: }`

要执行上面的剧本，我尝试了下面的两个命令

sudo ansible-playbook /etc/ansible/userloop.yml -e /etc/ansible/vars.yml
sudo ansible-playbook /etc/ansible/userloop.yml

但是两个命令都失败并显示以下错误

fatal: [host-003]: FAILED! => {"msg": "'user_details' is undefined"}
fatal: [host-004]: FAILED! => {"msg": "'user_details' is undefined"}

如何解决问题？我想维护一个单独的变量文件来存储用户信息，而不是将它们放在同一个剧本文件中。

Answer 1

您还可以在剧本中引用多个变量文件，如下所示

- hosts: all
become: true
vars_files:
- /etc/ansible/vars.yml
tasks:
- name: more complex items to add several users
user:
name: "{{ item.name }}"
uid: "{{ item.uid }}"
groups: "{{ item.groups }}"
state: present
with_items: "{{ user_details }}"

Answer 2

变量的类型在模块用户的"参数"列中。尝试以下数据结构

user_details:
- {name: 'testuser1', uid: 1002, groups: ['admin', 'logs']}
- {name: 'testuser2', uid: 1003, groups: ['logs']}

Answer 3

你在传递 vars.yml 时缺少@。因此，ansible 不会读取文件。请尝试以下命令。它对我有用。

sudo ansible-playbook /etc/ansible/userloop.yml -e @/etc/ansible/vars.yml