rendoaw

## Ansible-Vault how-to.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                rendoaw
                / Ansible-Vault how-to.md
            
            
              Created
              March 23, 2017 19:43
                — forked from tristanfisher/Ansible-Vault how-to.md
            
              
                A short tutorial on how to use Vault in your Ansible workflow. Ansible-vault allows you to more safely store sensitive information in a source code repository or on disk.
              
          
    ##Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

  
## ssh_jump.py
#!/usr/bin/env python3

import os
import paramiko

ssh_key_filename = os.getenv('HOME') + '/.ssh/id_rsa'

jumpbox_public_addr = '168.128.52.199'
jumpbox_private_addr = '10.0.5.10'
target_addr = '10.0.5.20'
	#!/usr/bin/env python3

	import os
	import paramiko

	ssh_key_filename = os.getenv('HOME') + '/.ssh/id_rsa'

	jumpbox_public_addr = '168.128.52.199'
	jumpbox_private_addr = '10.0.5.10'
	target_addr = '10.0.5.20'