对 Chef 变量有疑问，似乎无法让变量工作

Question

我正在尝试使用服务器角色将数据添加到模板中。我尝试了几种方法，但似乎都没能奏效。

这是角色代码块。

ruby_block 'get_main_role_attr' do
block do
  require 'mixlib/shellout'
  rolecmd = Mixlib::ShellOut.new("cat /var/chef/role | cut -d',' -f 1 | cut -c2-")
  rolecmd.run_command
  rolecmd.error!
  node.normal['mainrole'] = rolecmd.stdout
 end
end
template "/etc/ssh/sshd_config" do
  source "ssh/sshd_config.erb"
  owner "root"
  group "root"
  mode "0600"
  action :create
  variables(
    :allowed_users_team1 => "AllowUsers user1 user2 user3",
    ) if node['mainrole'] == "role1"
  notifies :restart, "service[sshd]", :immediately
  variables(
    :allowed_users_team2 => "AllowUsers user4 user5 user6",
    ) if node['mainrole'] == "role2" || node['mainrole'] ==  "role3" || node['mainrole'] == "role4"
  notifies :restart, "service[sshd]", :immediately
end

方法1

variables(
    :allowed_users => "AllowUsers user1 user2",
    ) if node['mainrole'] == "role1" || node['mainrole'] ==  "role2" ||    node['mainrole'] == "role3"
notifies :restart, "service[sshd]", :immediately

方法2

variables(
   :allowed_users => "AllowUsers user1 user2",
   ) if node['mainrole'] == "role1" || "role2" || "role3"
notifies :restart, "service[sshd]", :immediately

方法3

variables(
   :allowed_users_bidder => "AllowUsers user1 user2",
) if node['roles'].any? {|r| %w{role1 role2 role3}.include?(r)}
notifies :restart, "service[sshd]", :immediately

请让我知道我做错了什么。。感谢的帮助

Thx

Answer 1

Chef客户端运行分为两部分：编译和收敛。在第一个阶段，Chef创建一个应该应用于节点的资源集合，在第二个阶段，它应用更改。更多关于厨师文档

您在收敛状态下分配node.normal['mainrole']，但在编译阶段(在此之前(检查值(node['mainrole'] == "role1"(。

您需要将赋值移动到编译状态，或者将检查移动到收敛状态。如何将支票移动到收敛状态的示例之一是使用not_if或only_if。在这种情况下，您需要2个模板资源：

template "/etc/ssh/sshd_config for 1,2,3" do
  path "/etc/ssh/sshd_config"
  source "ssh/sshd_config.erb"
  owner "root"
  group "root"
  mode "0600"
  action :create
  variables(:allowed_users_team1 => "AllowUsers user1 user2 user3")
  only_if { node['mainrole'] == "role1" }
  notifies :restart, "service[sshd]", :immediately
end
template "/etc/ssh/sshd_config for 4,5,6" do
  path "/etc/ssh/sshd_config"
  source "ssh/sshd_config.erb"
  owner "root"
  group "root"
  mode "0600"
  action :create
  variables(:allowed_users_team2 => "AllowUsers user4 user5 user6")
  only_if { %w[role2 role3 role4].include? node['mainrole'] }
  notifies :restart, "service[sshd]", :immediately
end

另一种方法是在模板内部移动逻辑，并传递两个不同的变量：

  variables(:allowed_users_team2 => "AllowUsers user4 user5 user6",
    :allowed_users_team1 => "AllowUsers user1 user2 user3",
    :mainrole => node['mainrole'])