Skip to content

Instantly share code, notes, and snippets.

@infamousjoeg
Last active May 23, 2022 11:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save infamousjoeg/dec0c309ff236e3aac1b41bf91dd3ef5 to your computer and use it in GitHub Desktop.
Save infamousjoeg/dec0c309ff236e3aac1b41bf91dd3ef5 to your computer and use it in GitHub Desktop.
Ansible Multiple Secret Playbook
export CONJUR_ACCOUNT=poc
export CONJUR_APPLIANCE_URL=https://ec2-00-00-00-00.compute-1.amazonaws.com
export CONJUR_CERT_FILE=conjur-poc.pem
export CONJUR_AUTHN_LOGIN=admin
export CONJUR_AUTHN_API_KEY=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID2jCCAsKgAwIBAgIJAOQSG46gYs5VMA0GCSqGSIb3DQEBCwUAMFcxDDAKBgNV
BAoMA3BvYzESMBAGA1UECwwJQ29uanVyIENBMTMwMQYDVQQDDCplYzItNTQtMTk4
LTE5Mi0xNzYuY29tcHV0ZS0xLmFtYXpvbmF3cy5jb20wHhcNMjIwNTExMTY1MTI1
WhcNMzIwNTA4MTY1MTI1WjBXMQwwCgYDVQQKDANwb2MxEjAQBgNVBAsMCUNvbmp1
ciBDQTEzMDEGA1UEAwwqZWMyLTU0LTE5OC0xOTItMTc2LmNvbXB1dGUtMS5hbWF6
b25hd3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhl3YMQm
eoyWV90tI8u54fUA99haP+6VwwrE4Ygm7DhP/M8fEP0/j8lYsytLTVDRuBCtppzy
QTR57qgzCJxuKZoAT0QLAIKPF+xzdBSqq0BUjkO3hzzRFyUCo+DCv9ko7v7GtbUR
7Wlmui12Gz2Yl/X0xh5mTlZVmLtWcCMWfH8irHz0AQukWPn03/QGozUIjP/hNKyg
SWUosv9wwA+mbKK+imJ6aQ3AhCrvgUQmRbTIDqeXjtY+ApztOdPLh1Qy71ZIZrl0
EtrYRJ6FPO+KqaR7aSr2rREKy8Kn3wGVoitU3oL085v+La8mHwfAOUwViKxvsuee
wHcE5vWUr2x46QIDAQABo4GoMIGlMEgGA1UdEQRBMD+CKmVjMi01NC0xOTgtMTky
LTE3Ni5jb21wdXRlLTEuYW1hem9uYXdzLmNvbYIJbG9jYWxob3N0ggZjb25qdXIw
HQYDVR0OBBYEFAxwPADinU4ievGQcsGXJa4hfFrQMB8GA1UdIwQYMBaAFAxwPADi
nU4ievGQcsGXJa4hfFrQMAwGA1UdEwQFMAMBAf8wCwYDVR0PBAQDAgHmMA0GCSqG
SIb3DQEBCwUAA4IBAQAgV2HQNWyY3H3PwozQ9O4TtsoVcuFtGtGQwqlAXtGzxBeG
jPI0d4HX+51NITpmG+bBTHrN6iMuPbshj7l8ejuNmjQ719PzKbwm5uX9b0qyCHHu
85YRtm3PyTpPwlbo0x7lq/NXlDydsknEWnU+KM2fZQbzvK7TCcwH2JExq1Y5isNE
lATqh3QeRRn8tp0GzbH1wK3v1l25KZIdYciY9WmO7EDHMxsni4c+rikmoJqwCnPq
ps2MQfz4vtvZgN2I01lG361A3Vo/lEBLeGExFWsjuwrJwrjL5OH+G15rxJxfvlwv
u9feYrq/sALqdyuf5qF1GZez1yozB/twsgE3vv1a
-----END CERTIFICATE-----
[targets]
ec2-00-00-00-00.compute-1.amazonaws.com owner=ops-team-1 ansible_ssh_user=ec2-user
ec2-11-11-11-11.compute-1.amazonaws.com owner=ops-team-2 ansible_ssh_user=ec2-user
- hosts: localhost
collections:
- cyberark.conjur
tasks:
- name: Copy private keys to /tmp
copy:
dest: /tmp/{{ hostvars[item].owner }}.pem
content: "{{ lookup('cyberark.conjur.conjur_variable', 'ansible/' + hostvars[item].owner + '/private_key') }}"
mode: 0400
with_items: "{{ groups['targets'] }}"
- hosts: targets
vars:
ansible_ssh_private_key_file: /tmp/{{ owner }}.pem
tasks:
- name: Get hostname
shell: hostname
register: thehost
- name: Print variable
debug:
msg: "{{ thehost.stdout }}"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment