如何在循环中使用with_dict编写Ansible任务(with_items)

时间:2014-11-25 14:56:17

标签: python configuration-files ini ansible

我想更新INI配置文件。

今天,我以这种方式将我的信息存储在var文件中(在group_vars中):

# Identity configuration information
identity_servers_conf:
  DEFAULT:
    admin_token: "{{identity_admin_token}}"
    verbose: True
  database:
    connection: "mysql://{{ identity_db_user }:{{ identity_db_password }}@{{ db_lb_name }}/{{ identity_db }}"    
  token:
    provider: keystone.token.providers.uuid.Provider
    driver: keystone.token.persistence.backends.sql.Token  

在我的Ansible任务中,我以这种方式使用这些信息:

- name: configuration / modify keystone.conf ini file DEFAULT section
  ini_file:
    section: DEFAULT
    dest: /etc/keystone/keystone.conf
    option: "{{item.key}}"
    value: "{{item.value}}"
  with_dict: identity_servers_conf['DEFAULT']

有没有办法在每个"部分"中迭代我的dict文件?参数,即DEFAULT,数据库,令牌。事实上,我试图找到一种方法来在with_items循环中嵌套._ / p>

1 个答案:

答案 0 :(得分:4)

我发现这种组织.ini文件变量的方式非常有趣。

我想自己使用它,所以我开发了一个插件,允许使用inifile模块一次性生成.ini文件的所有键。

它工作正常,我用来管理我的OpenStack配置文件。

我不是开发方面的专家,但我认为这个插件对每个人都有用,所以如果有人想接管维护并将其整合到ansible中,欢迎他。

该插件转换列表中的层次结构数据(section,key,value),以便直接与inifile模块with_inidata一起使用,如下所示:

vars文件:

...
glanceapi_conf:
  DEFAULT:
    verbose: "{{ image_log_verbose }}"
    rabbit_host: "{{ amqp_host }}"
    rabbit_port: "{{ amqp_port }}"
    rabbit_userid: "{{ amqp_userid }}"
    rabbit_password: "{{ amqp_password }}"
    rabbit_ha_queues: "{{ amqp_ha_queues }}"
  database:
    connection: "mysql://{{ image_db_user }}:{{ image_db_password }}@{{ db_host }}/{{ image_db }}"
  keystone_authtoken:
    auth_uri: "http://{{ identity_admin_host }}:{{ identity_api_port }}/v2.0"
    identity_uri: "http://{{ identity_admin_host }}:{{ identity_admin_port }}"
    admin_tenant_name: "{{ image_ks_tenant }}"
    admin_user: "{{ image_ks_user }}"
    admin_password: "{{ image_ks_password }}"
  paste_deploy:
    flavor: keystone
  glance_store:
    default_store: file
    filesystem_store_datadir: /var/lib/glance/images/
...

插件代码:

# (c) 2014, Pierre-Yves KERVIEL <pierreyves.kerviel@orange.com>
#
# Ansible is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Ansible is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.

# inidata is used to manage ini

import ansible.utils as utils
import ansible.errors as errors

class LookupModule(object):

    def __init__(self, basedir=None, **kwargs):
        self.basedir = basedir


    def run(self, terms, inject=None, **kwargs):
        terms = utils.listify_lookup_plugin_terms(terms, self.basedir, inject)

        if not isinstance(terms, dict):
            raise errors.AnsibleError("inidata lookup expects a dictionnary , got '%s'" %terms)

        ret = []
        for item0 in terms:
            if not isinstance(terms[item0], dict):
                raise errors.AnsibleError("inidata lookup expects a dictionary, got '%s'" %terms[item0])
            for item1 in terms[item0]:
                ret.append((item0, item1, terms[item0][item1]))

        return ret

任务代码:

- name: configuration.modify_glance-api_conf_file / modify glance-api.conf ini file
  ini_file:
    section: "{{ item.0 }}"
    dest: /etc/glance/glance-api.conf
    option: "{{ item.1 }}"
    value: "{{ item.2 }}"
    backup: yes
  with_inidata: glanceapi_conf

要使用它,只需在/etc/ansible.cfg中定义的目录中复制名为“dataini”的插件代码。

对于Ubuntu发行版,这应该是/ usr / share / ansible_plugins / lookup_plugins,并按照我的示例编写您的任务。

我希望这个插件可以让你简化你的ini文件管理。