Ansible：将元素添加到具有新随机字符串的字典列表中

Question

我有一个 ansible 变量，它是一个字典列表：

userdata:
  - { first: Mike, last: Smith, username: msmith}
  - { first: Jane, last: Largo, username: jlargo}
  - { first: Evan, last: Jones, username: ejones}

我想为每个条目添加一个字段，'password' 为每个条目分配一个随机生成的 20 个字符的字母数字密码，这样我就可以在剧本中根据需要使用它来进行各种操作需要将该密码同步到的操作。我试着做一个 block:，但了解到你不能那样做 with_items。我也找不到使用 with_items 并保存回该项目的字典的方法。密码查找插件看起来很有希望 (https://docs.ansible.com/ansible/latest/plugins/lookup/password.html) 获取随机密码而无需将其保存到文件 (/dev/null)，但我似乎无法在列表的每个元素中获取它。

最后，我想要一个这样的结构：

userdata:
  - { first: Mike, last: Smith, username: msmith, password: FdUChpPtfonoPexMZmt0}
  - { first: Jane, last: Largo, username: jlargo, password: QR13sN7CP00LbdXZ0gON}
  - { first: Evan, last: Jones, username: ejones, password: OCQSmqCbO8239jHpQiRm}

Answer 1

您需要创建一个循环覆盖原始列表的新列表。对于每个项目，您将现有属性与密码属性结合起来。下面是一个例子：

---
- hosts: localhost
  gather_facts: false

  vars:
    userdata:
      - { first: Mike, last: Smith, username: msmith }
      - { first: Jane, last: Largo, username: jlargo }
      - { first: Evan, last: Jones, username: ejones }

  tasks:

    - name: Create a new list with random password
      vars:
        user_entry: "{{ item | combine({'password': lookup('password', '/dev/null')}) }}"
      set_fact:
        users_with_pass: "{{ users_with_pass | default([]) + [user_entry] }}"
      loop: "{{ userdata }}"

    - name: Show result
      debug:
        var: users_with_pass

给出：

$ ansible-playbook test.yml 

PLAY [localhost] **************************************************************************************************************************************************************************************************

TASK [Create a new list with random password] *********************************************************************************************************************************************************************
ok: [localhost] => (item={'first': 'Mike', 'last': 'Smith', 'username': 'msmith'})
ok: [localhost] => (item={'first': 'Jane', 'last': 'Largo', 'username': 'jlargo'})
ok: [localhost] => (item={'first': 'Evan', 'last': 'Jones', 'username': 'ejones'})

TASK [Show result] ************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "users_with_pass": [
        {
            "first": "Mike",
            "last": "Smith",
            "password": "w-zk-BAqJuJ090mTy8g0",
            "username": "msmith"
        },
        {
            "first": "Jane",
            "last": "Largo",
            "password": "J6g07utP.ANtbY7Z58Za",
            "username": "jlargo"
        },
        {
            "first": "Evan",
            "last": "Jones",
            "password": "eqHdpKDpkpEBY21qTyz5",
            "username": "ejones"
        }
    ]
}

PLAY RECAP ********************************************************************************************************************************************************************************************************
localhost                  : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

Ansible：将元素添加到具有新随机字符串的字典列表中

Ansible: Adding an element to a list of dictionaries with new random string

python

jinja2

ansible