Last active
April 9, 2018 23:17
-
-
Save gadelkareem/4ea0bd728acd7b32279ec9f227add614 to your computer and use it in GitHub Desktop.
Ansible vault encrypt/decrypt shell script
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
####Usage | |
# ./vault.sh encrypt | |
# ./vault.sh dencrypt | |
# ./vault.sh encrypt /full/path/to/file.yml | |
###### | |
set -euo pipefail | |
cd `dirname $0` | |
if [ -z "$PASSWORD" ]; then | |
read -s -p "Enter Password: " PASSWORD | |
fi | |
VAULT_FILE=vault_key | |
echo "${PASSWORD}" > "${VAULT_FILE}" | |
ACTION=decrypt | |
if [ "$1" != "" ]; then | |
ACTION="$1" | |
fi | |
FILES=(group_vars/prod/*.yml) | |
if [ ! -z "${2-}" ]; then | |
FILES=("$2") | |
fi | |
for FILE in "${FILES[@]}" | |
do | |
if [ "${ACTION}" = "encrypt" ]; then | |
echo "Encrypting ${FILE}" | |
ansible-vault encrypt "${FILE}.decrypted" --output=$FILE --vault-password-file "${VAULT_FILE}" | |
else | |
echo "Decrypting ${FILE}" | |
ansible-vault decrypt $FILE --output="${FILE}.decrypted" --vault-password-file "${VAULT_FILE}" | |
fi | |
done | |
rm -rf "${VAULT_FILE}" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment