This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
ansible:ansible_vault [2023/03/20 23:53] manu |
ansible:ansible_vault [2023/09/19 19:27] (current) manu |
||
---|---|---|---|
Line 9: | Line 9: | ||
* rekey: reencrypt | * rekey: reencrypt | ||
+ | Add option --vault-password-file <filename_not_encrypt> to prevent asking password | ||
+ | |||
+ | ansible vault | ||
+ | |||
+ | vaultID: multi-password | ||
+ | <code> | ||
+ | ansible-vault encrypt --vault-id pwd.txt group_vars/all/vault.txt | ||
+ | |||
+ | ansible-vault encrypt --vault-id @prompt group_vars/all/vault.txt | ||
+ | |||
+ | ansible -i "127.0.0.1," all --vault-id pwd.txt -m debug -a "msg='{{mysecret}}'" | ||
+ | |||
+ | Now add a specific ID (;id1) into the vaulting file | ||
+ | $ANSIBLE_VAULT;1.1;AES256;id1 | ||
+ | |||
+ | ansible -i "127.0.0.1," all --vault-id id1@pwd.txt -m debug -a "msg='{{mysecret}}'" | ||
+ | </code> | ||
+ | |||
+ | |||
+ | Variables used by ansible cfg | ||
+ | ansible_user | ||
+ | ansible_password |