This Gist shows how you can encrypt/decrypt variables with KMS during your Ansible playbook execution. While google searching I couldn't find anything useful on the subject.
Let's say your project has a folder of playbooks called plays.
In that folder, create a folder called filter_plugins and insert kms_filters.py (included in this gist)
Recently, Let's Encrypt launched free wildcard certificates. While this is good news in and of itself, as it removes one of the last remaining reasons for expensive commercial certificates, I've unfortunately seen a lot of people dangerously misunderstand what wildcard certificates are for.
Therefore, in this brief post I'll explain why you probably shouldn't use a wildcard certificate, as it will put your security at risk.
It's generally pretty poorly understood (and documented!) how TLS ("SSL") works, so let's go through a brief explanation of the parts that are important here.
The general (simplified) idea behind how real-world TLS deployments work, is that you:
| import hashlib | |
| import io | |
| import json | |
| import socket | |
| import ssl | |
| from base64 import b64encode | |
| from json import JSONDecodeError | |
| from typing import Any, Dict, Optional | |
| from urllib import parse |