Ansible with_items 第二个列表作为条件

Question

我有我在每个系统上创建的完整用户列表。如何为每个系统创建一个条件来创建仅在 group_vars 中定义的用户变量 system_users ?
变量:users.yml

users:
  user1:
    username: user1
    password: "example"
  user2:
    username: user2
    password: "example"
  user3:
    username: user3
    password: "example"

group_var: dev-systems.yml

system_users:
  - "user1"
  - "user2"

任务:main.yml

- name: Create users and change password
  user:
    name: "{{ users[item].username }}"
    password: "{{ users[item].password }}"
    shell: /bin/bash
    state: present
    update_password: on_create
  become: true
  with_items: "{{ users }}"

主机

[dev-systems]
example-system.local

Answer 1

尝试这个

- name: Create users and change password
  user:
    name: "{{ item.username }}"
    password: "{{ item.password }}"
    shell: /bin/bash
    state: present
    update_password: on_create
  become: true
  loop: "{{ system_users|map('extract',users)|list }}"