如何配置需要循环中变量的字典？

Question

我有一个docker_container，我想为多个用户部署它，并以用户的名字命名traefik路由。但我搞不懂我怎么能做到这一点。

以下是我所拥有的：

- name: Run syncthing
  docker_container:
    name: "{{ item.name }}-syncthing"
    image: "lscr.io/linuxserver/syncthing"
    state: started
    restart_policy: "always"
    env:
      PUID: "1000"
      PGID: "1000"
    volumes:
      - "{{ item.data_dir }}:/data"
... other volumes
    labels:
      traefik.enable: true
      "traefik.http.routers.{{ item.name }}-syncthing.entrypoints": websecure
      "traefik.http.routers.{{ item.name }}-syncthing.rule": Host(`{{ item.name }}.{{ fqdn_real }}`)
      "traefik.http.routers.{{ item.name }}-syncthing.tls": true
      "traefik.http.routers.{{ item.name }}-syncthing.tls.certresolver": le 
      "traefik.http.routers.{{ item.name }}-syncthing.service": "{{ item.name }}-syncthing"
      "traefik.http.routers.{{ item.name }}-syncthing.middlewares": "{{ item.name }}-basicauth"
      "traefik.http.services.{{ item.name }}-syncthing.loadbalancer.server.port": 8080
      "traefik.http.middlewares.{{ item.name }}-syncthing-basicauth.basicauth.users": "{{ item.auth }}"
  with_items: "{{ syncthing_containers_info }}"

像这样的syncthing_config_info：

syncthing_containers_info:
  - { name: "c1", data_dir: "/mnt/data/c1/data", auth: "..." }
  - { name: "c2", data_dir: "/mnt/data/c2/data", auth: "..." }
  - { name: "c3", data_dir: "/mnt/data/c3/data", auth: "..." }

这个片段不起作用，因为ansible不喜欢语法，所以我用this尝试了一个with_nested，但是在尝试set_fact时，我遇到了一个类似的问题，因为标签集依赖于syncthing_containers_info。有更好的方法让我这么做吗？

Answer 1

听起来您需要labels:作为一个实际的dict，因为yaml键不受jinja2内插的限制。

    labels: >-
      {%- set key_prefix = "traefik.http.routers." ~ item.name ~"-syncthing" -%}
      {{ {
      "traefik.enable": True,
      key_prefix ~ ".entrypoints": "websecure",
      key_prefix ~ ".rule": "Host(`" ~ item.name ~"."~ fqdn_real ~"`)",
      key_prefix ~ ".tls": True,
      key_prefix ~ ".tls.certresolver": "le",
      key_prefix ~ ".service": item.name ~ "-syncthing",
      key_prefix ~ ".middlewares": item.name ~ "-basicauth",
      "traefik.http.services." ~ item.name ~ "-syncthing.loadbalancer.server.port": 8080,
      "traefik.http.middlewares." ~ item.name ~"-syncthing-basicauth.basicauth.users": item.auth,
      } }}

(请注意，我没有测试这个，只是从你的问题上看了一下，但这是总的想法)