打印变量时出现错误，Ansible 播放失败 - 任务包含一个带有未定义变量的选项

Question

我在 Ansible 中有一个 shell 任务，它在

if-else

条件之间进行。在 if 条件下，它会在 2 行上打印

echo

，而在

else

条件下，它会打印单行。

我需要一个针对

if

和

else

条件打印的通用调试打印语句。

- name: Extract certificate or key information
  shell: >     
    if [[ "{{ certlocation }}" != *.key ]]; then
      cert_cn=$(openssl x509 -in "{{ certlocation }}" -noout -subject -nameopt sep_multiline)
      echo "~$cert_cn"
      cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
      echo "~$cert_san"
    else
      cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
      echo "~$cert_san"   
    fi
  register: cert_info
  delegate_to: localhost

- name: Print specific information
  debug:
    msg: |
      cert_cn: "{{ cert_info.stdout_lines[0].split('~')[1] | default('NA') }}"
      cert_san: "{{ cert_info.stdout_lines[1].split('~')[1] | default(cert_info.stdout_lines[0].split('~')[1]) }}"

我尝试了上述方法，但在打印一行的

else

条件下失败并出现以下错误：

TASK [Print specific informations] ***************************************************************************************************************************Monday 29 July 2024  23:51:46 -0500 (0:00:00.022)       0:00:00.517 ***********
fatal: [localhost]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: list object has no element 1\n\nThe error appears to be in '/home/wladmin/teststdoutlines.yml': line 17, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n    - name: Print lines using index from stdout_lines\n      ^ here\n"}

我预计失败后它会默认为具有有效值的

cert_info.stdout_lines[0].split('~')[1]

。

一旦

debug

工作，我希望对

set_facts

应用相同的解决方案以将值分配给变量。

如何在 Ansible 中处理此类情况？

Answer 1

这里，首先需要在ansible playbook中定义一个变量，你可以通过三种方式定义变量。

1. 在ansible playbook中提及变量
2. 运行 playbook 时在额外变量中提及变量
3. 在 ansible playbook 中使用 set_fact 提及变量 因此，您可以通过三种方式应用这样的解决方案。

---

- name: extract key information
  hosts: all
  gather_facts: false
  vars:
    certlocation: "/path/to/your/keyfile"
  tasks:
    - name: Extract certificate or key information
      shell: >     
        if [[ "{{ certlocation }}" != *.key ]]; then
          cert_cn=$(openssl x509 -in "{{ certlocation }}" -noout -subject -nameopt sep_multiline)
          echo "~$cert_cn"
          cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
          echo "~$cert_san"
        else
          cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
          echo "~$cert_san"   
        fi
      register: cert_info
      delegate_to: localhost

    - name: Print specific information
      debug:
        msg: |
          cert_cn: "{{ cert_info.stdout_lines[0].split('~')[1] | default('NA') }}"
          cert_san: "{{ cert_info.stdout_lines[1].split('~')[1] | default(cert_info.stdout_lines[0].split('~')[1]) }}"

现在，第二种方法是你可以在额外的变量中定义一个变量

ansible-playbook main.yml --extra-vars “certlocation = /路径/到/您的/密钥文件”

因此，第三种方法就像这样使用 setfact 定义变量

---
- name: extract key information
  hosts: all
  gather_facts: false
  tasks:

    - name: Set certlocation
      set_fact:
        certlocation: "/path/to/your/certificate/or/key/file"

    - name: Extract certificate or key information
      shell: >     
        if [[ "{{ certlocation }}" != *.key ]]; then
          cert_cn=$(openssl x509 -in "{{ certlocation }}" -noout -subject -nameopt sep_multiline)
          echo "~$cert_cn"
          cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
          echo "~$cert_san"
        else
          cert_san=$(openssl x509 -in "{{ certlocation }}" -noout -ext subjectAltName)
          echo "~$cert_san"   
        fi
      register: cert_info
      delegate_to: localhost

    - name: Print specific information
      debug:
        msg: |
          cert_cn: "{{ cert_info.stdout_lines[0].split('~')[1] | default('NA') }}"
          cert_san: "{{ cert_info.stdout_lines[1].split('~')[1] | default(cert_info.stdout_lines[0].split('~')[1]) }}"

像这样你可以通过三种方式定义变量