0

我有系统（Zabbix）使用基于“/”定界符的粗略组/子组定义，这些定界符在普通列表中定义。

例如：“Grp(1)”“Grp(1)/Subgrp(A)”“Grp(1)/Subgrp(B)”“Grp(2)”“Grp(2)/Subgrp(X)”

这定义了两个组，具有两个子组（A 和 B）的 Grp(1) 和具有一个子组 (X) 的 Grp(2)

如果我在逻辑上将用户分配给“Grp(1)”，则预计用户也自动拥有“Grp(1)/Subgrp(A)”和“Grp(1)/Subgrp(B)”的权限

示例 vars 文件如下所示：

---
groups_vars:
  - "Grp(1)"
  - "Grp(1)/Subgrp(A)"
  - "Grp(1)/Subgrp(B)"
  - "Grp(2)"
  - "Grp(2)/Subgrp(X)"

vars 用于 ansible Galaxy 模块 community.zabbix，Grp(1) 有简化用法：

- name: Ensure user groups are created and right to itself and subgroups are assigned
  community.zabbix.zabbix_usergroup:
    name: Grp(1)
    rights:
      - {host_group: ["Grp(1)","Grp(1)/Subgrp(A)","Grp(1)/Subgrp(B)"], permission: "read-write" }

我试图实现输入变量的“set_fact”转换为更适合ansible循环的格式：

--- 
groups_vars: 
  - 
    name: Grp(1)
    rights: 
      host_group: 
        - Grp(1)
        - Grp(1)/Subgrp(A)
        - Grp(1)/Subgrp(B)
      permission: read-write
  - 
    name: Grp(1)/Subgrp(A)
    rights: 
      host_group: 
        - Grp(1)/Subgrp(A)
      permission: read-write
  - 
    name: Grp(1)/Subgrp(B)
    rights: 
      host_group: 
        - Grp(1)/Subgrp(B)
      permission: read-write
  - 
    name: Grp(2)
    rights: 
      host_group: 
        - Grp(2)
        - Grp(1)/Subgrp(X)
      permission: read-write
  - 
    name: Grp(2)/Subgrp(X)
    rights: 
      host_group: 
        - Grp(2)/Subgrp(X)
      permission: read-write

但我没有定义转换。我尝试用于过滤的 select('match', ) 函数是基于正则表达式的，但它本身可以包含正则表达式指令（名称“Grp(1)”包含作为正则表达式指令的括号），我无法找到任何“startswith”方法寻找子群。我的想法是，对于上面定义的原始 group_vars 中的每个组，我找到所有以组名开头的项目（所以对于“Grp(2)”，我会找到“Grp(2)”和“Grp(2)/Subgrp (X)”，对于“Grp(2)/Subgrp(X)”，我只会找到“Grp(2)/Subgrp(X)”本身）

请任何想法如何解决这个问题？也许我的方法完全错误，如果有更优雅的解决方案，请帮助。

4

1 回答 1

0

我终于找到了解决问题的方法。

我创建了简单的 Python 脚本，它生成可用于简单的普通 ansible 循环的数据。通过生成复杂结构（字典数组）来模拟内部循环

有源 YML 文件：

---
groups_vars:
  - "z_JC(015)"
  - "z_JC(015)/Pisek(022)"
  - "z_HK(055)"

有转换后的 YML 文件，内部循环由 "rights:" 下的数组模拟

usergroups_vars:
- group: z_JC(015)
  rights:
  - host_group: z_JC(015)
    permission: read-write
  - host_group: z_JC(015)/Pisek(022)
    permission: read-write
- group: z_JC(015)/Pisek(022)
  rights:
  - host_group: z_JC(015)/Pisek(022)
    permission: read-write
- group: z_HK(055)
  rights:
  - host_group: z_HK(055)
    permission: read-write

该剧本使用简单的普通循环简单地处理转换后的 YML 文件：

- name: Ensure z_ prefixed Zabbix UserGroups are present and linked to eponymous HostGroups and subhostgroups
      community.zabbix.zabbix_usergroup:
        server_url: "{{ static_hostvars.server_url }}"
        login_user: "{{ static_hostvars.login_user }}"
        login_password: "{{ static_hostvars.login_password }}"
        state: "present"
        name: "{{ item.group }}"
        rights: "{{ item.rights }}"
      loop: "{{ usergroups_vars }}"

有 Python 转换脚本的示例（使用 pyyaml 库）：

import yaml

# Press the green button in the gutter to run the script.
if __name__ == '__main__':

    # Load and parse host group var yaml file
    hostgroups = None
    with open('groups_vars.yaml') as f:
        hostgroups = yaml.load(f, Loader=yaml.FullLoader)

    # Create eponymous usergroups for hostgroups with prefix 'z_'
    usergroups = []
    for hostgroup in hostgroups.get('groups_vars'):
        if hostgroup.startswith('z_'):
            usergroups.append(hostgroup)


    # Find subgroups ut of list og groups delimited by '/'
    # (E.g array ['grp1','grp1/subgrp1'] defined one group 'grp1' and one subgroup 'subgrp1')
    usergrpsubgrps = []
    for onegrp in usergroups:
        # Find subgroups (including the group itself)
        subgrps = []
        for onesubgroup in usergroups:
            if onesubgroup.startswith(onegrp):
                subgrps.append({'host_group': onesubgroup, 'permission': 'read-write'})

        usergrpsubgrps.append({'group': onegrp, 'rights': subgrps})
    out_yaml = yaml.dump({'usergroups_vars' : usergrpsubgrps})
    print(out_yaml)

    # Write output yaml to the output ansible vars file
    out_file = open('usergroups_vars.yaml','w')
    out_file.write(out_yaml)
    out_file.close()
于 2021-04-06T14:58:09.523 回答