Question

我的一部有趣的剧本中有以下任务：


    - name: Generate vault token
      uri:
        url: "{{vault_address}}/v1/auth/github/login"
        method: POST
        body: "{ \"token\": \"{{ token }}\" }"
        validate_certs: no
        body_format: json
      register: vault_token

    - name: debug vault
      debug:
        msg: "{{vault_address}}/v1/{{vault_path}}/db2w-flex/{{region_name}}"

    - name: Create secret in vault
      uri:
        url: "{{vault_address}}/v1/{{vault_path}}/db2w-flex/{{region_name}}"
        method: POST
        body: '{ "secret_access_key": "{{ (new_access_key.stdout |from_json).AccessKey.SecretAccessKey }}", "access_key_id": "{{ (new_access_key.stdout |from_json).AccessKey.AccessKeyId }}" }'
        validate_certs: no
        status_code: 204
        headers:
          X-VAULT-TOKEN: '{{ vault_token.json.auth.client_token }}'
        body_format: json

此任务不断失败：

fatal: [localhost]: FAILED! => {"cache_control": "no-store", "changed": false, "content": "{\"errors\":[\"missing client token\"]}\n", "content_length": "36", "content_type": "application/json", "date": "Tue, 02 Apr 2019 20:16:03 GMT", "failed": true, "json": {"errors": ["missing client token"]}, "msg": "Status code was not [204]", "redirected": false, "status": 400}

同一任务在另一台主机（kubernetes POD）上可以正常工作。我正在新系统（docker容器）上运行它。客户端令牌已正确生成。我可以通过curl进行POST，因此容器上没有网络问题。有什么办法可以调试正在传递的标头，被击中的URL等？我不知道缺少什么。

我没有使用Vault CLI。它全部基于HTTP。

添加-vvvv后，以下是日志：

TASK [Create secret in vault] **************************************************
task path: /deployment/updateVault.yml:16
ESTABLISH LOCAL CONNECTION FOR USER: root
127.0.0.1 EXEC ( umask 22 && mkdir -p "$( echo $HOME/.ansible/tmp/ansible-tmp-1554241833.81-120109582683210 )" && echo "$( echo $HOME/.ansible/tmp/ansible-tmp-1554241833.81-120109582683210 )" )
127.0.0.1 PUT /tmp/tmpDgx1F_ TO /root/.ansible/tmp/ansible-tmp-1554241833.81-120109582683210/uri
127.0.0.1 EXEC LANG=en_US.UTF-8 LC_ALL=en_US.UTF-8 LC_MESSAGES=en_US.UTF-8 /usr/bin/python /root/.ansible/tmp/ansible-tmp-1554241833.81-120109582683210/uri; rm -rf "/root/.ansible/tmp/ansible-tmp-1554241833.81-120109582683210/" > /dev/null 2>&1
fatal: [localhost]: FAILED! => {"cache_control": "no-store", "changed": false, "content": "{\"errors\":[\"missing client token\"]}\n", "content_length": "36", "content_type": "application/json", "date": "Tue, 02 Apr 2019 21:50:34 GMT", "failed": true, "invocation": {"module_args": {"backup": null, "body": {"access_key_id": "xxxxxxxxxxxx", "secret_access_key": "5ovB684peTr8YpnNMQBn+xxxxxxxxxxx+"}, "body_format": "json", "content": null, "creates": null, "delimiter": null, "dest": null, "directory_mode": null, "follow": false, "follow_redirects": "safe", "force": null, "force_basic_auth": false, "group": null, "headers": {"X-VAULT-TOKEN": "eee90f1c-3c9e-edaf-32e6-b6cexxxxx"}, "method": "POST", "mode": null, "owner": null, "password": null, "regexp": null, "remote_src": null, "removes": null, "return_content": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "status_code": ["204"], "timeout": 30, "url": "https://vserv-us.sos.ibm.com:8200/v1/generic/user/akanksha-jain/db2w-flex/us", "user": null, "validate_certs": false}, "module_name": "uri"}, "json": {"errors": ["missing client token"]}, "msg": "Status code was not [204]", "redirected": false, "status": 400}

我尝试在同一个吊舱中使用以上所有细节进行卷曲，效果很好。

Answer 1

在命令行中添加useEffect()进行调试。

按照您指定的-vvvv，您可以简化body_format: json部分：

body

Answer 2

我能够使用2.7.9的ansible版本2.0.0.2来解决此问题

调试http发布请求

2 个答案: