如何在 Ansible jinja2 模板中正确定义子元素(带子元素)?

How to correctly define subelements in Ansible jinja2 template(with subelements)?

我正在编写 ansible-playbook 以将 nginx.conf 与包含分开。在我看来,使用 nginx.conf 这样的选项会更舒服,因为我可以在 playbook vars 中包含或排除一些配置块。

目前我遇到了部分问题:name: 2. Copy nginx.conf config.

playbook.yml:


- name: "setup_nginx"
  hosts: "TEST_HOST"
  gather_facts: yes
  remote_user: root

  vars:

    nginx_worker_processes:          "{{ ansible_processor_cores }}"                                            
    nginx_worker_connections:        "32768"                                                                    
    nginx_worker_rlimit_nofile:      "{{ (ansible_processor_cores*{{ nginx_worker_connections }}*2)|int|abs }}" 
    nginx_directories:
        - directory: inc
          nginx_files:
            - file: "gzip.inc"                                   
            - file: "logs.inc"                                     
            - file: "mime.types"                                 
            - file: "tuning.inc"                   
            - file: "proxy.inc"                                    
            - file: "ssl.inc"                    
        - directory: sites
          nginx_files: 
            - file: "mysite1"                                     
            - file: "mysite2"                               
- tasks: 

  - name: 1. Create nginx directories
    file:
      path: "/etc/nginx/{{ item.directory }}"
      state: directory
      owner: nginx
      group: nginx
    with_items:
     - "{{ nginx_directories }}"

  - name: 2. Copy nginx.conf config.
    template:
       src: nginx.conf.j2
       dest: /etc/nginx/nginx.conf
       mode: 0640
       owner: nginx
       group: nginx
       backup: yes
    with_subelements:
     - "{{ nginx_directories }}"
     - nginx_files

nginx.conf.j2:

user nginx;

worker_processes {{ ansible_processor_cores }};                      

events {
worker_connections 32768;                                            
use epoll;                                                           
multi_accept on;                                                                           
}

worker_rlimit_nofile {{ (ansible_processor_cores*32768*2)|int|abs }};

http {

{% for val in nginx_directories %}
include /etc/nginx/{{ item.0.directory }}/{{ item.1.file }};
{% endfor %}

}

我期望结果:

user nginx;

worker_processes 1;  

events {
worker_connections 32768;                                            
use epoll;                                                           
multi_accept on;                                                                          
}

worker_rlimit_nofile 65536;

http {

include /etc/nginx/inc/gzip.inc;
include /etc/nginx/inc/logs.inc;
include /etc/nginx/inc/mime.types;
include /etc/nginx/inc/tuning.inc;
include /etc/nginx/inc/proxy.inc;
include /etc/nginx/inc/ssl.inc;
include /etc/nginx/sites/mysite1;
include /etc/nginx/sites/mysite2;

}

但实际结果:

user nginx;

worker_processes 1; 

events {
worker_connections 32768;                                            
use epoll;                                                           
multi_accept on;                                                                          
}

worker_rlimit_nofile 65536;

http {

include /etc/nginx/sites/mysite2.j2;
include /etc/nginx/sites/mysite2.j2;

}

我认为问题在于我没有在模板中正确定义子元素 nginx.conf.j2.

此致

删除模板任务和模板使用中的循环

{% for val in nginx_directories | subelements('nginx_files') %}
include /etc/nginx/{{ val.0.directory }}/{{ val.1.file }};
{% endfor %}

FWIW。 config_encoder_filters 有一个优雅的解决方案,它编码 YAML 数据

my_nginx_vhost_config:
  - server:
    - listen 8080
    - server_name www.example.com
    - "location /":
      - root /usr/local/www/nginx-dist/
      - index index.html

使用简单模板

# {{ ansible_managed }}
{{ my_nginx_vhost_config | encode_nginx }}

到 nginx 配置

# cat /usr/local/etc/nginx/conf.d/default.conf
# Ansible managed
server {
  listen 8080;
  server_name www.example.com;

  location / {
    root /usr/local/www/nginx-dist/;
    index index.html;
  }
}

详情请见 nginx role