looking on google, this seems to come up a lot.
have users. each user has N ssh keys. sometimes, one of the users keys is 
revoked. for example, a crashed cellphone sent in for repair. 

we keep keys like this
├── voxel
│   └── voxel.pub
├── pixel
│   ├── pixelphone3.pub
│   ├── pixel.pub
│   └── revoked
│       └── pixelphone2.pub
└── root
    ├── voxel.pub
    └── pixel.pub

with a single user, this works

- hosts: all
  - name: install ssh keys
      key="{{ lookup('file',item) }}"
      - ssh_keys/root/*
  - name: remove unwanted keys
      key="{{ lookup('file',item) }}"
      - ssh_keys/root/revoked/*

how can you do that with a list of users?


- hosts: multiuser
  - name: install user
    user: name={{ item }} 
    with_items: "{{ users }}"
  - name: install ssh keys
      user: "{{ item.0 }}"
      key: "{{ lookup('file',item.1) }}"
      - "{{ users }}"
      - "{{ lookup('fileglob', 'public_keys/{{ item.0 }}/*').split(',') }}"

but got 

[DEPRECATION WARNING]: Skipping task due to undefined Error, in the future 
this will be a 
fatal error.: 'item' is undefined.
This feature will be removed in a future release. 
Deprecation warnings can be disabled by setting deprecation_warnings=False 
in ansible.cfg.
fatal: [devla]: FAILED! => {"failed": true, "msg": "the field 'args' has an 
invalid value, which appears to include a variable that is undefined. The 
error was: 'item' is undefined\n\nThe error appears to have been in 
'/home/pixel/hivecluster/users.yml': line 7, column 5, but may\nbe 
elsewhere in the file depending on the exact syntax problem.\n\nThe 
offending line appears to be:\n\n    with_items: \"{{ users }}\"\n  - name: 
install ssh keys\n    ^ here\n"}

You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to