Ansible: VPC redefine: TypeError: string indices must be integers, not str

Question

我需要帮助使其正常工作，以便在路由 table.

中为私有子网添加 nat 实例 ID 作为 gw

这是我的 vpc 剧本：

/tasks/vpc.yml

---
 - name: VPC | Creating an AWS VPC inside mentioned Region
   local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ public_subnet_rt }}"

===== 这是我的 vars/vpc.yml 文件：

---
ec2_inst_id: i-abc1432c
# Variables for VPC
vpc_name: tendo
vpc_region: ap-southeast-2
vpc_cidr_block: 172.25.0.0/16
public_cidr: 172.25.10.0/24
public_az: "{{ vpc_region}}b"
private_cidr: 172.25.20.0/24
private_az: "{{ vpc_region }}a"
nat_private_ip: 172.25.10.10

# Please don't change the variables below, until you know what you are doing
#
# Subnets Defination for VPC
vpc_subnets:
  - cidr: "{{ public_cidr }}" # Public Subnet
    az: "{{ public_az }}"
    resource_tags: { "Name":"{{ vpc_name }}_public_subnet" }
  - cidr: "{{ private_cidr }}" # Private Subnet
    az: "{{ private_az }}"
    resource_tags: { "Name":"{{ vpc_name }}_private_subnet" }

## Routing Table for Public Subnet
public_subnet_rt:
  - subnets:
      - "{{ public_cidr }}"
    routes:
      - dest: 0.0.0.0/0
        gw: igw

当我运行上面的剧本工作正常时：

ansible-playbook -i 'localhost,' --connection=local site.yml -vvvv       

PLAY [all] ********************************************************************

TASK: [VPC | Creating an AWS VPC inside mentioned Region] *********************
<127.0.0.1> region=ap-southeast-2 cidr_block=172.25.0.0/16 state=present
<127.0.0.1>
<127.0.0.1>
<127.0.0.1> u'LANG=C LC_CTYPE=C /usr/bin/python /Users/arbab/.ansible/tmp/ansible-tmp-1427103212.79-152394513704427/ec2_vpc; rm -rf /Users/arbab/.ansible/tmp/ansible-tmp-1427103212.79-152394513704427/ >/dev/null 2>&1']
changed: [localhost -> 127.0.0.1] => {"changed": true, "subnets": [{"az": "ap-southeast-2b", "cidr": "172.25.10.0/24", "id": "subnet-70845e15", "resource_tags": {"Name": "tendo_public_subnet"}}, {"az": "ap-southeast-2a", "cidr": "172.25.20.0/24", "id": "subnet-8d1fdffa", "resource_tags": {"Name": "tendo_private_subnet"}}], "vpc": {"cidr_block": "172.25.0.0/16", "dhcp_options_id": "dopt-261e0244", "id": "vpc-9cea26f9", "region": "ap-southeast-2", "state": "available"}, "vpc_id": "vpc-9cea26f9"}

这是我重新定义nat-instance id为gw的VPC时出现的问题

---
 - name: NAT | NAT Route
   set_fact:
     private_subnet_rt: '{{ lookup("template", "../templates/nat_routes.json.j2") }}'

 - name: redefine vpc
   local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ private_subnet_rt }}"

下面是 nat_routes.json.j2 的内容：

- subnets:
     - {{ public_cidr }}
  routes:
     - dest: 0.0.0.0/0
       gw: "igw"
- subnets:
     - {{ private_cidr }}
  routes:
     - dest: 0.0.0.0/0
       gw: {{ ec2_inst_id }}

我在创建 NAT 实例后运行上述剧本时出现此错误：

TASK: [redefine vpc] **********************************************************
<127.0.0.1> region=ap-southeast-2 cidr_block=172.25.0.0/16 state=present route_tables=- subnets:
- 172.25.10.0/24
routes:
- dest: 0.0.0.0/0
gw: igw
- subnets:
- 172.25.20.0/24
routes:
- dest: 0.0.0.0/0
gw: i-abc1432c

    failed: [localhost -> 127.0.0.1] => {"failed": true, "parsed": false}
    Traceback (most recent call last):
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 2413, in <module>
        main()
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 618, in main
        (vpc_dict, new_vpc_id, subnets_changed, changed) = create_vpc(module, vpc_conn)
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 425, in create_vpc
        for route in rt['routes']:
    TypeError: string indices must be integers, not str

你能指出我哪里出错了吗？

谢谢

Answer 1

也许 private_subnet_rt: '{{ lookup("template", "../templates/nat_routes.json.j2") }}' 读取 nat_routes.json.j2 的内容并将其作为 字符串 分配给 private_subnet_rt。不是您预期的 YAML 字典列表。

你需要的是：

nat_routes.json.yml 的内容：

private_subnet_rt:
  - subnets:
       - "{{ public_cidr }}"
    routes:
       - dest: 0.0.0.0/0
         gw: "igw"
  - subnets:
       - "{{ private_cidr }}"
    routes:
       - dest: 0.0.0.0/0
         gw: "{{ ec2_inst_id }}"

然后使用 include_vars 而不是 set_fact:.

将该变量添加到您的剧本中

- include_vars: nat_routes.json.yml
- name: redefine vpc
  local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ private_subnet_rt }}"

您也可以将 nat_routes.json.yml 放在子文件夹 group_vars 或 host_vars 或 roles/<role>/vars 下。请参阅 recommended folder structure，在这种情况下，您不必执行 include_vars，ansible 会根据您正在操作的 host/group/role 隐式为您执行此操作。

HTH

Ansible: VPC redefine: TypeError: string indices must be integers, not str