Ansible playbook to add dynamic list of object in network group object

[Gert_Vossius]

Hi all,

I'm using the tutorial playbook on the Check Point Github page and I want to make a playbook where I can create host objects and a network group object based on an input file.

The goal is to use/create n number of hosts and add that n number of hosts to a network group objects based on an inputfile dat is dynamically generated by another script.

For this I'm trying to use the with_items statement in Ansible but I get the error:

TASK [set group] *******************************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"failed": true, "msg": "The task includes an option with an undefined variable. The error was: 'item' is undefined\n\nThe error appears to have been in '/root/workspace/ansible/cp/cp_add_host_to_existing_group-playbook.yml': line 27, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n # the login command is used here to run 'add-host'\n - name: \"set group\"\n ^ here\n\nexception type: <class 'ansible.errors.AnsibleUndefinedVariable'>\nexception: 'item' is undefined"}

This is how my playbook looks like

---
- hosts: "localhost" # Note #2 in the Description section
 vars_files:
 - varhosts.yml
 tasks:
 - name: "login" # You have to login to the management
 # server before running any commands
 check_point_mgmt:
 command: login
 parameters:
 username: "{{mgmt_user}}" # Variables set in /etc/ansible/hosts, to avoid needing
 password: "{{mgmt_password}}" # to type your login details in every playbook.
 management: "{{mgmt_server}}"
 domain: "{{mgmt_domain}}"
 fingerprint: "XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX"
 register: login_response # Register the output from the login
 # command so we can use it later to run commands.
 - name: "add host"
 check_point_mgmt:
 command: add-host # Name of the command
 parameters: # The parameters for it, in dictionary form
 name: "{{item.host_name}}"
 ipv4-address: "{{item.ipv4_address}}"
 session-data: "{{ login_response }}" # The session data we received from
 with_items: "{{host_table}}"
 # the login command is used here to run 'add-host'
 - name: "set group"
 check_point_mgmt:
 command: set-group
 parameters:
 name: "{{group_name}}"
 members:
 - "{{item.host_name}}"
 with_items: "{{host_table}}"
 session-data: "{{ login_response }}"
 - name: "publish" # Publishing is important if you want
 # your changes to be saved.
 check_point_mgmt: # This will actually 'discard' when
 # check mode is enabled (ansible-playbook -C)
 # unless you add 'always_run: yes' to the task.
 command: publish
 session-data: "{{login_response}}"
 - name: logout
 check_point_mgmt:
 command: logout
 session-data: '{{login_response}}'‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I also tried this:

- name: "set group"
 check_point_mgmt:
 command: set-group
 parameters:
  name: "{{group_name}}"
  members:
   - "{{item.host_name}}"
  session-data: "{{ login_response }}"‍‍‍‍‍‍‍‍‍
 with_items: "{{host_table}}"‍‍‍‍‍‍‍‍‍

add with_items on the end of the group, but in that case only 1 (the last) host object is added to the network group object.

Somebody who can help me with this? I'm an Ansible fresher so any help is welcome!

Thanks

[PhoneBoy]

I believe the mistake is that you're referring to the item as item.host_name when you're using with_items.

However, I am by no means an Ansible expert.

Also keep in mind that Ansible is very sensitive to spacing/indents and can fail when this is incorrect.