First big articles reformatting now that I properly understand hugo

This commit is contained in:
Julien Dessaux 2021-03-11 19:47:26 +01:00
parent 5e6844592a
commit 1a4981a826
40 changed files with 184 additions and 173 deletions

View file

@ -1,17 +1,31 @@
---
title: "Ansible vault example"
linkTitle: "Ansible vault example"
date: 2018-02-21
description: >
Ansible vault example
description: Getting started with ansible vault
tags:
- ansible
---
## Editing a protected file
Here is how to edit a vault protected file :
{{< highlight sh >}}
ansible-vault edit hostvars/blah.yml
{{< / highlight >}}
Here is how to put a multiline entry like a private key in vault (for a simple value, just don't use a `|`):
## Using a vault entry in a task or a jinja template
It is as simple as using any variable :
{{< highlight yaml >}}
- copy:
path: /etc/ssl/private.key
mode: 0400
content: '{{ ssl_key }}'
{{< / highlight >}}
## How to specify multiple lines entries
This is actually a yaml question, not a vault one but since I ask myself this frequently in this context here is how to put a multiple lines entry like a private key in vault (for a simple value, just don't use a `|`):
{{< highlight yaml >}}
ssl_key : |
@ -21,13 +35,7 @@ ssl_key : |
----- END PRIVATE KEY -----
{{< /highlight >}}
And here is how to use it in a task :
{{< highlight yaml >}}
- copy:
path: /etc/ssl/private.key
mode: 0400
content: '{{ ssl_key }}'
{{< / highlight >}}
## How to run playbooks when vault values are needed
To run a playbook, you will need to pass the `--ask-vault` argument or to export a `ANSIBLE_VAULT_PASSWORD_FILE=/home/julien/.vault_pass.txt` variable (the file needs to contain a single line with your vault password here).