运行 这个 ansible 播放时出错“错误!'unicode object' 没有属性 'comment'

Error when running this ansible play "ERROR! 'unicode object' hasno attribute 'comment'

这是我的剧本

 - name: Add multiple users
   user:
    name: "{{ item[0].name }}"
    comment: "{{ item[0].comment }}"
    uid: "{{ item[0].uid }}"
    groups: "{{ item[0].groups}}"
    shell: /bin/bash
   with_nested:
     - "{{ name }}"
     - "{{ comment }}"
     - "{{ uid }}"
     - "{{ groups }}"

这是我的 vars 文件

---
name:
 - test1
 - test2

comment:
 - "comment1"
 - "comment2"

uid:
 - 150
 - 151

groups: "sudo, admin"

我不确定是什么原因造成的,有什么想法吗?我相信我可能需要使用子元素而不是嵌套?我在正确的轨道上吗?

更新:

更改了我的代码,但现在遇到以下问题。更新代码和错误消息

 - name: Add new group if it doesn't exist already
   group:
    name: "{{ group }}"
   when: group is defined

 - name: Add multiple users
   user:
    name: "{{ item.0 }}"
    comment: "{{item.1 }}"
    uid: "{{ item.2 }}"
    group: "{{ group }}"
    groups: "{{ groups }}"
    append: yes

   with_together:
     - "{{ name }}"
     - "{{ comment }}"
     - "{{ uid }}"
     - "{{ group }}"
And variable file:
name:
 - test1
 - test2

comment:
 - "comment1"
 - "comment2"

uid:
 - 150
 - 151

group: sudo

groups:
 - admin
 - test
However, now I am receiving this error.
failed: [127.0.0.1] => (item=[u'test1', u'comment1', 150, u'sudo']) => {"failed": true, "invocation": {"module_args": {"append": true, "comment": "comment1", "createhome": true, "expires": null, "force": false, "generate_ssh_key": null, "group": "sudo", "groups": "{'ungrouped': ['127.0.0.1'], 'all': ['127.0.0.1']}", "home": null, "login_class": null, "move_home": false, "name": "test1", "non_unique": false, "password": null, "remove": false, "shell": null, "skeleton": null, "ssh_key_bits": "2048", "ssh_key_comment": "ansible-generated on ubuntu-512mb-sfo1-01", "ssh_key_file": null, "ssh_key_passphrase": null, "ssh_key_type": "rsa", "state": "present", "system": false, "uid": "150", "update_password": "always"}, "module_name": "user"}, "item": ["test1", "comment1", 150, "sudo"], "msg": "Group  'all': ['127.0.0.1']} does not exist"}
failed: [127.0.0.1] => (item=[u'test2', u'comment2', 151, None]) => {"failed": true, "invocation": {"module_args": {"append": true, "comment": "comment2", "createhome": true, "expires": null, "force": false, "generate_ssh_key": null, "group": "sudo", "groups": "{'ungrouped': ['127.0.0.1'], 'all': ['127.0.0.1']}", "home": null, "login_class": null, "move_home": false, "name": "test2", "non_unique": false, "password": null, "remove": false, "shell": null, "skeleton": null, "ssh_key_bits": "2048", "ssh_key_comment": "ansible-generated on ubuntu-512mb-sfo1-01", "ssh_key_file": null, "ssh_key_passphrase": null, "ssh_key_type": "rsa", "state": "present", "system": false, "uid": "151", "update_password": "always"}, "module_name": "user"}, "item": ["test2", "comment2", 151, null], "msg": "Group  'all': ['127.0.0.1']} does not exist"}

问题是变量名冲突。 groups 是一个保留变量,用于保存清单中的组。 all 是一个自动生成的组,其中包含您清单中的所有主机。

From the docs:

Even if you didn’t define them yourself, Ansible provides a few variables for you automatically. The most important of these are hostvars, group_names, and groups. Users should not use these names themselves as they are reserved. environment is also reserved.

groups is a list of all the groups (and hosts) in the inventory. This can be used to enumerate all hosts within a group.

只需重命名您的变量,它就会起作用。通常,在角色的所有变量前加上角色名称是个好主意。如果您使用 3rd 方角色,这将变得更加重要,例如来自 Ansible Galaxy,只是为了避免冲突。因此,您可以使用 myrole_groups 而不是 groups,并且可以非常确定永远不会发生冲突。