20210803 (화) ansible-vault

ansible-vault

ansible-vault create FILE

ansible-vault view FILE

ansible-vault edit FILE

ansible-vault encrypt FILE

ansible-vault decrypt FILE

 

 

ansible-playbook PLAYBOOK --ask-vault-pass

ansible-playbook PLAYBOOK --valut-pass-file VAULT_PASS_FILE

 

--- - name : ansible-vault   hosts: all   vars_files:   - ./secret_test.yaml   tasks:   - name: print userid     debug:       msg: "username - {{ userid }}, password - {{ password }}" [user@ansible-server 20210803]$ cat secret_test.yaml userid: user01 password: my_password [user@ansible-server 20210803]$ ansible-playbook vault_test.yaml --ask-vault-pass Vault password: PLAY [ansible-vault] *************************************************************************************************** TASK [Gathering Facts] ************************************************************************************************* ok: [192.168.56.12] ok: [192.168.56.11] ok: [192.168.56.13] TASK [print userid] **************************************************************************************************** ok: [192.168.56.11] => {     "msg": "username - user01, password - my_password" } ok: [192.168.56.12] => {     "msg": "username - user01, password - my_password" } ok: [192.168.56.13] => {     "msg": "username - user01, password - my_password" } PLAY RECAP ************************************************************************************************************* 192.168.56.11              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0 192.168.56.12              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0 192.168.56.13              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0