![Ansible:如何验证 ansible_become_user,以及是否缺少用户输入提示(多个主机)](https://linux22.com/image/205049/Ansible%EF%BC%9A%E5%A6%82%E4%BD%95%E9%AA%8C%E8%AF%81%20ansible_become_user%EF%BC%8C%E4%BB%A5%E5%8F%8A%E6%98%AF%E5%90%A6%E7%BC%BA%E5%B0%91%E7%94%A8%E6%88%B7%E8%BE%93%E5%85%A5%E6%8F%90%E7%A4%BA%EF%BC%88%E5%A4%9A%E4%B8%AA%E4%B8%BB%E6%9C%BA%EF%BC%89.png)
我使用多个主机,如果在清单或剧本中未设置 ansible_become_user 和 ansible_become_password,我想提示用户提供 sudo 用户名和密码
我使用以下:
库存文件:
os:
children:
centos:
hosts:
clean_centos_1:
vars:
ansible_become_user: root
ansible_become_password: root
rocky:
hosts:
clean_rocky_1:
ubuntu:
hosts:
clean_ubuntu_1:
debian:
hosts:
clean_debian_1:
alpine:
hosts:
clean_alpine_1:
vars:
ansible_become_user: root
ansible_become_password: root
vars:
ansible_user: test
ansible_password: test
剧本
- name: "PLAY1"
hosts: all
gather_facts: no
tasks:
## Identify ansible_become_user if present
#------------------------------------------------------
- name: "Test if ansible_become_user is empty"
debug:
var: ansible_become_user
register: result
when: ansible_become_user | length > 0
ignore_errors: yes
- name: "Set status_ansible_become_user"
set_fact:
status_ansible_become_user: "{{ status_ansible_become_user|default({}) | combine( { ansible_host: 'absent' if result.failed is true else 'present' }) }}"
## Get user input
#------------------------------------------------------
- name: "User-input: <ansible_become_user>"
pause:
prompt: "\nEnter root username or sudo username for host: {{ansible_host}}"
when: item == 'absent'
loop: "{{status_ansible_become_user.values()}}"
- set_fact:
ansible_become_user: "{{ result.user_input }}"
when: result.failed is false
- debug:
var: item == 'absent'
loop: "{{status_ansible_become_user.values()}}"
上面的例子中,因为 clean_centos_1 位于行的第一个,并且设置了 ansible_become_user 和 ansible_become_passwor,所以其他主机会被跳过,如下所示,并且没有提示
TASK [User-input: <ansible_become_user>] **********************************************************************************************************************************************************************************************************************************
skipping: [clean_centos_1] => (item=present)
TASK [set_fact] ***********************************************************************************************************************************************************************************************************************************************************
fatal: [clean_centos_1]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'user_input'\n\nThe error appears to be in '/git/ansible/role/rar.pkg.python/playbook/test.yml': line 28, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n - set_fact:\n ^ here\n"}
skipping: [clean_rocky_1]
skipping: [clean_debian_1]
skipping: [clean_ubuntu_1]
fatal: [clean_alpine_1]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'user_input'\n\nThe error appears to be in '/git/ansible/role/rar.pkg.python/playbook/test.yml': line 28, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n - set_fact:\n ^ here\n"}
问题:
如何正确验证是否设置了 ansible_become_user 和 ansible_become_password,如果没有设置,如何提示使用提供每个主机可能不同的 ansible_become_user 和 ansible_become_password?
答案1
例如,在下面的剧本中
- hosts: all
gather_facts: false
vars:
ab: "{{ hostvars|dict2items|json_query(_query) }}"
_query: "[].{host: key,
ansible_become_user: value.ansible_become_user,
ansible_become_password: value.ansible_become_password}"
ab_hosts: "{{ ab|map(attribute='host')|list }}"
ab_dict: "{{ dict(ab_hosts|zip(ab)) }}"
tasks:
- block:
- include_tasks: enter_ansible_become.yml
loop: "{{ ab }}"
- set_fact:
ab_dict: "{{ ab_dict|combine(ab_update, recursive=True) }}"
run_once: true
- add_host:
groups: test
hostname: "{{ item.key }}"
ansible_become_user: "{{ item.value.ansible_become_user }}"
ansible_become_password: "{{ item.value.ansible_become_password }}"
loop: "{{ ab_dict|dict2items }}"
- hosts: test
gather_facts: false
tasks:
- debug:
msg: |-
ansible_become_user: {{ ansible_become_user }}
ansible_become_password: {{ ansible_become_password }}
创建主机和变量的列表和字典
ab:
- ansible_become_password: root
ansible_become_user: root
host: clean_centos_1
- ansible_become_password: null
ansible_become_user: null
host: clean_rocky_1
- ansible_become_password: null
ansible_become_user: null
host: clean_ubuntu_1
- ansible_become_password: null
ansible_become_user: null
host: clean_debian_1
- ansible_become_password: root
ansible_become_user: root
host: clean_alpine_1
ab_dict:
clean_alpine_1:
ansible_become_password: root
ansible_become_user: root
host: clean_alpine_1
clean_centos_1:
ansible_become_password: root
ansible_become_user: root
host: clean_centos_1
clean_debian_1:
ansible_become_password: null
ansible_become_user: null
host: clean_debian_1
clean_rocky_1:
ansible_become_password: null
ansible_become_user: null
host: clean_rocky_1
clean_ubuntu_1:
ansible_become_password: null
ansible_become_user: null
host: clean_ubuntu_1
运行一次,迭代块中的列表,并包含文件中的任务Enter_ansible_become.yml
shell> cat enter_ansible_become.yml
- block:
- pause:
prompt: "[{{ item.host }}] Enter ansible_become_user"
register: result
- set_fact:
ab_update: "{{ ab_update|d({})|combine(update, recursive=True) }}"
vars:
update: "{{ {item.host: {'ansible_become_user': result.user_input}} }}"
when: not item.ansible_become_user
- block:
- pause:
prompt: "[{{ item.host }}] Enter ansible_become_password"
register: result
- set_fact:
ab_update: "{{ ab_update|d({})|combine(update, recursive=True) }}"
vars:
update: "{{ {item.host: {'ansible_become_password': result.user_input}} }}"
when: not item.ansible_become_password
(可选)设置参数echo: false
以隐藏密码。默认值为真的。看回声。
例如,输入缺失变量的值
TASK [pause] *********************************************************************************
[pause]
[clean_rocky_1] Enter ansible_become_user:
admin1^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
TASK [pause] *********************************************************************************
[pause]
[clean_rocky_1] Enter ansible_become_password:
123^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
TASK [pause] *********************************************************************************
[pause]
[clean_ubuntu_1] Enter ansible_become_user:
admin2^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
TASK [pause] *********************************************************************************
[pause]
[clean_ubuntu_1] Enter ansible_become_password:
456^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
TASK [pause] *********************************************************************************
[pause]
[clean_debian_1] Enter ansible_become_user:
admin3^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
TASK [pause] *********************************************************************************
[pause]
[clean_debian_1] Enter ansible_become_password:
789^Mok: [clean_centos_1]
TASK [set_fact] ******************************************************************************
ok: [clean_centos_1]
这将创建字典ab_更新
ab_update:
clean_debian_1:
ansible_become_password: '789'
ansible_become_user: admin3
clean_rocky_1:
ansible_become_password: '123'
ansible_become_user: admin1
clean_ubuntu_1:
ansible_become_password: '456'
ansible_become_user: admin2
仍然在块中,组合字典
ab_dict:
clean_alpine_1:
ansible_become_password: root
ansible_become_user: root
host: clean_alpine_1
clean_centos_1:
ansible_become_password: root
ansible_become_user: root
host: clean_centos_1
clean_debian_1:
ansible_become_password: '789'
ansible_become_user: admin3
host: clean_debian_1
clean_rocky_1:
ansible_become_password: '123'
ansible_become_user: admin1
host: clean_rocky_1
clean_ubuntu_1:
ansible_become_password: '456'
ansible_become_user: admin2
host: clean_ubuntu_1
在下一个任务中使用模块添加主机并创建动态组测试。在下一场比赛中使用这个小组。变量应该正确声明
PLAY [test] **********************************************************************************
TASK [debug] *********************************************************************************
ok: [clean_centos_1] =>
msg: |-
ansible_become_user: root
ansible_become_password: root
ok: [clean_rocky_1] =>
msg: |-
ansible_become_user: admin1
ansible_become_password: 123
ok: [clean_ubuntu_1] =>
msg: |-
ansible_become_user: admin2
ansible_become_password: 456
ok: [clean_debian_1] =>
msg: |-
ansible_become_user: admin3
ansible_become_password: 789
ok: [clean_alpine_1] =>
msg: |-
ansible_become_user: root
ansible_become_password: root