Ansible loop in items and then loop again with a module (nested loop)

Question

I have a list of items in my playbook.

x_ssl_certs:
  - 'host1.domain.tld'
  - 'host2.domain.tld'
  - 'host3.domain.tld'
  - 'anotherhost.domain.tld'

Each of it has it's own SSL files, like host1.domain.tld.key host1.domain.tld.crt host1.domain.tld.fullchain ... and so on. Now I using this playbook to send out this files:

- name: Copy the {{ item }} key files
  copy:
    src: "{{ item }}/{{ item }}.key"
    dest: '/etc/ssl/{{ item }}.key'
    owner: 'root'
    group: 'root'
    mode: '0644'
  loop: "{{ x_ssl_certs }}"

- name: Copy the {{ item }} crt files
  copy:
    src: "{{ item }}/{{ item }}.crt"
    dest: '/etc/ssl/{{ item }}.crt'
    owner: 'root'
    group: 'root'
    mode: '0644'
  loop: "{{ x_ssl_certs }}"

- name: Copy the {{ item }} fullchain files
  copy:
    src: "{{ item }}/{{ item }}.fullchain"
    dest: '/etc/ssl/{{ item }}.fullchain'
    owner: 'root'
    group: 'root'
    mode: '0644'
  loop: "{{ x_ssl_certs }}"

and so on, 1 task for every file. I would like to integrate this into one or two task, so it should lookup the x_ssl_certs list and send out each file which belongs to them. This files are the same naming convention for each item in the list.

This should be a loop in the loop, nested loop, or something like that, but based on the documentation it is not exactly clear for me how to make that.

Vladimir Botka · Accepted Answer · 2022-06-29 01:36:27Z

3

Use with_nested. For example,

    - debug:
        msg: "Copy {{ item.0 }}.{{ item.1 }}"
      with_nested:
        - "{{ x_ssl_certs }}"
        - [key, crt, fullchain]

gives

  msg: Copy host1.domain.tld.key
  msg: Copy host1.domain.tld.crt
  msg: Copy host1.domain.tld.fullchain
  msg: Copy host2.domain.tld.key
  msg: Copy host2.domain.tld.crt
  msg: Copy host2.domain.tld.fullchain
  msg: Copy host3.domain.tld.key
  msg: Copy host3.domain.tld.crt
  msg: Copy host3.domain.tld.fullchain
  msg: Copy anotherhost.domain.tld.key
  msg: Copy anotherhost.domain.tld.crt
  msg: Copy anotherhost.domain.tld.fullchain

answered Jun 29, 2022 at 1:36

Vladimir Botka

70k7 gold badges45 silver badges78 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Darwick Over a year ago

Thank you, I think now I understand the logic of with_nested. Based on the documentation I have translated with_nested to the new loop instead, it looks like this in this case: loop: "{{ x_ssl_certs|product(['key', 'pem', 'fullchain'])|list }}"

Vladimir Botka Over a year ago

Right. The only difference is that nested is a lookup plugin and product is a filter. The results are the same.

Collectives™ on Stack Overflow

Ansible loop in items and then loop again with a module (nested loop)

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related