ansible 在来自 with_items 循环的变量中使用变量

Question

我正在尝试使用 with_item 中的变量来创建名称更改的事实：

- name: get ABC Root CA pem from chamber
  shell: AWS_PROFILE={{aws_profile}} chamber read -q secrets abc_ca_{{ item }} | awk 'NR==2 { FS="[ \t+]"; print(); }' | base64 -d | gunzip
  changed_when: false
  delegate_to: localhost
  vars:
    ansible_become: no
  with_items: "{{ abc_environments }}" # see defaults/main.yml
  when: ('chamber' in chamber_installed.stdout)
  register: abc_returned_environment
  tags:
      - service-discovery

- name: set ABC root ca pem secrets
  set_fact:
    aws_secrets: "{{ aws_secrets|default({}) | combine( {item.item: item.stdout} ) }}"
  with_items: "{{abc_returned_environment.results}}"
  when: ('chamber' in chamber_installed.stdout)
  tags:
      - service-discovery

- name: Write aws_secrets ABC root CA file
  vars:
    env: "{{ item }}"
  copy:
    content: "{{ aws_secrets.(lookup('vars', env )) }}\n"
    dest: /etc/prometheus/abc_{{ item  }}_file_sd/ca_{{ item  }}.pem
    owner: prometheus
    group: prometheus
    mode: 0600
  with_items: "{{ abc_environments }}"
  when: ('chamber' in chamber_installed.stdout)
  tags:
      - service-discovery

如何让 content 行表现得像这样？

content: "{{ aws_secrets.abc_ca_dev }}\n"

其中abc_environments设置为：

abc_environments:
  - dev
  - qa
  - int
  - staging-green
  - staging-blue
  - prod-green
  - prod-blue

Answer 1

结果其实很简单:

- name: Write aws_secrets ABC root CA file
  copy:
    content: "{{ aws_secrets[ item ] }}\n"
    dest: /etc/prometheus/abc_{{ item  }}_file_sd/ca_{{ item  }}.pem
    owner: prometheus
    group: prometheus
    mode: 0600
  with_items: "{{ abc_environments }}"
  when: ('chamber' in chamber_installed.stdout)
  tags:
      - service-discovery

还处理变量名称中的破折号。

ansible 在来自 with_items 循环的变量中使用变量

ansible use vars in vars from with_items loop

ansible

ansible-2.x

ansible-facts