This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
ansible:ansible_vault [2023/09/11 00:31] manu |
ansible:ansible_vault [2023/09/19 19:27] (current) manu |
||
|---|---|---|---|
| Line 8: | Line 8: | ||
| * encrypt: encrypt a file or variable | * encrypt: encrypt a file or variable | ||
| * rekey: reencrypt | * rekey: reencrypt | ||
| + | |||
| + | Add option --vault-password-file <filename_not_encrypt> to prevent asking password | ||
| + | |||
| + | |||
| ansible vault | ansible vault | ||
| vaultID: multi-password | vaultID: multi-password | ||
| + | <code> | ||
| ansible-vault encrypt --vault-id pwd.txt group_vars/all/vault.txt | ansible-vault encrypt --vault-id pwd.txt group_vars/all/vault.txt | ||
| Line 23: | Line 27: | ||
| ansible -i "127.0.0.1," all --vault-id id1@pwd.txt -m debug -a "msg='{{mysecret}}'" | ansible -i "127.0.0.1," all --vault-id id1@pwd.txt -m debug -a "msg='{{mysecret}}'" | ||
| + | </code> | ||
| + | |||
| + | Variables used by ansible cfg | ||
| + | ansible_user | ||
| + | ansible_password | ||