1

我需要帮助才能使其工作，以便将 nat 实例 ID 添加为路由表内私有子网的 gw。

这是我的 vpc 剧本：

/tasks/vpc.yml

---
 - name: VPC | Creating an AWS VPC inside mentioned Region
   local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ public_subnet_rt }}"

===== 这是我的 vars/vpc.yml 文件：

---
ec2_inst_id: i-abc1432c
# Variables for VPC
vpc_name: tendo
vpc_region: ap-southeast-2
vpc_cidr_block: 172.25.0.0/16
public_cidr: 172.25.10.0/24
public_az: "{{ vpc_region}}b"
private_cidr: 172.25.20.0/24
private_az: "{{ vpc_region }}a"
nat_private_ip: 172.25.10.10

# Please don't change the variables below, until you know what you are doing
#
# Subnets Defination for VPC
vpc_subnets:
  - cidr: "{{ public_cidr }}" # Public Subnet
    az: "{{ public_az }}"
    resource_tags: { "Name":"{{ vpc_name }}_public_subnet" }
  - cidr: "{{ private_cidr }}" # Private Subnet
    az: "{{ private_az }}"
    resource_tags: { "Name":"{{ vpc_name }}_private_subnet" }

## Routing Table for Public Subnet
public_subnet_rt:
  - subnets:
      - "{{ public_cidr }}"
    routes:
      - dest: 0.0.0.0/0
        gw: igw

当我运行上面的剧本时，它工作正常：

ansible-playbook -i 'localhost,' --connection=local site.yml -vvvv       

PLAY [all] ********************************************************************

TASK: [VPC | Creating an AWS VPC inside mentioned Region] *********************
<127.0.0.1> region=ap-southeast-2 cidr_block=172.25.0.0/16 state=present
<127.0.0.1>
<127.0.0.1>
<127.0.0.1> u'LANG=C LC_CTYPE=C /usr/bin/python /Users/arbab/.ansible/tmp/ansible-tmp-1427103212.79-152394513704427/ec2_vpc; rm -rf /Users/arbab/.ansible/tmp/ansible-tmp-1427103212.79-152394513704427/ >/dev/null 2>&1']
changed: [localhost -> 127.0.0.1] => {"changed": true, "subnets": [{"az": "ap-southeast-2b", "cidr": "172.25.10.0/24", "id": "subnet-70845e15", "resource_tags": {"Name": "tendo_public_subnet"}}, {"az": "ap-southeast-2a", "cidr": "172.25.20.0/24", "id": "subnet-8d1fdffa", "resource_tags": {"Name": "tendo_private_subnet"}}], "vpc": {"cidr_block": "172.25.0.0/16", "dhcp_options_id": "dopt-261e0244", "id": "vpc-9cea26f9", "region": "ap-southeast-2", "state": "available"}, "vpc_id": "vpc-9cea26f9"}

这是我将 nat-i​​nstance id 重新定义为 gw 的 VPC 时出现的问题。

---
 - name: NAT | NAT Route
   set_fact:
     private_subnet_rt: '{{ lookup("template", "../templates/nat_routes.json.j2") }}'

 - name: redefine vpc
   local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ private_subnet_rt }}"

以下是 nat_routes.json.j2 的内容：

- subnets:
     - {{ public_cidr }}
  routes:
     - dest: 0.0.0.0/0
       gw: "igw"
- subnets:
     - {{ private_cidr }}
  routes:
     - dest: 0.0.0.0/0
       gw: {{ ec2_inst_id }}

在创建 NAT 实例后运行上述 playbook 时出现此错误：

TASK: [redefine vpc] **********************************************************
<127.0.0.1> region=ap-southeast-2 cidr_block=172.25.0.0/16 state=present route_tables=- subnets:
- 172.25.10.0/24
routes:
- dest: 0.0.0.0/0
gw: igw
- subnets:
- 172.25.20.0/24
routes:
- dest: 0.0.0.0/0
gw: i-abc1432c

    failed: [localhost -> 127.0.0.1] => {"failed": true, "parsed": false}
    Traceback (most recent call last):
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 2413, in <module>
        main()
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 618, in main
        (vpc_dict, new_vpc_id, subnets_changed, changed) = create_vpc(module, vpc_conn)
      File "/Users/arbab/.ansible/tmp/ansible-tmp-1427101746.8-192243069214182/ec2_vpc", line 425, in create_vpc
        for route in rt['routes']:
    TypeError: string indices must be integers, not str

你能指出我犯错的地方吗？

谢谢

4

1 回答 1

3

也许private_subnet_rt: '{{ lookup("template", "../templates/nat_routes.json.j2") }}'读取 nat_routes.json.j2 的内容并将其作为字符串分配给 private_subnet_rt 。不是您预期的 YAML 字典列表。

你需要的是这样的：

nat_routes.json.yml 的内容：

private_subnet_rt:
  - subnets:
       - "{{ public_cidr }}"
    routes:
       - dest: 0.0.0.0/0
         gw: "igw"
  - subnets:
       - "{{ private_cidr }}"
    routes:
       - dest: 0.0.0.0/0
         gw: "{{ ec2_inst_id }}"

然后使用include_vars, 而不是 . 将该变量放入您的剧本中set_fact:。

- include_vars: nat_routes.json.yml
- name: redefine vpc
  local_action:
     module: ec2_vpc
     region: "{{ vpc_region }}"
     state: present
     cidr_block: "{{ vpc_cidr_block }}"
     resource_tags: { "Name":"{{ vpc_name }}_vpc" }
     subnets: "{{ vpc_subnets }}"
     internet_gateway: yes
     route_tables: "{{ private_subnet_rt }}"

您也可以放在nat_routes.json.yml子文件夹group_vars或host_vars或下roles/<role>/vars。请参阅推荐的文件夹结构，在这种情况下您不必这样做include_vars，ansible 会根据您正在操作的主机/组/角色为您隐式执行。

高温高压

于 2015-03-25T19:42:46.423 回答