I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.
| #!/bin/bash | |
| APPNAME="appfolder" | |
| MOUNT_POINT="/media/hdd" | |
| APP_PATH="$MOUNT_POINT/$APPNAME" | |
| USERS_DIR="$APP_PATH/workers" | |
| sudo chmod -R 777 /$APP_PATH | |
| mv $USERS_DIR/*/tagged/* $APP_PATH/delivery |
| #!/bin/bash | |
| APPNAME="appfolder" | |
| FILE_EXTENSION='.gte' | |
| MOUNT_POINT="/media/hdd" | |
| APP_PATH="$MOUNT_POINT/$APPNAME" | |
| TMP_DIR="/tmp/$APPNAME/fohor" | |
| TMP_DIR_CHUNKS="/tmp/$APPNAME/fohor/chunks" | |
| [global] | |
| workgroup = WORKGROUP | |
| server string = | |
| security = user | |
| map to guest = bad user | |
| dns proxy = no | |
| log file = | |
| [The Vault] | |
| path = /media/hdd/folder/ |
| echo OFF | |
| :: Delayed Expansion causing variables to exanded at execution time rather than at parse time | |
| setlocal enabledelayedexpansion | |
| dir /ad /b > tel2.txt | |
| ::Entering in Day Folder | |
| for /F "tokens=*" %%j in (tel2.txt) do ( | |
| cd "%%j" | |
| echo "%%j" | |
| dir /ad /b > tel1.txt | |
| ::Entering in Event Folder |
| - hosts: | |
| servers | |
| user: user | |
| sudo: yes | |
| port: 2020 | |
| gather_facts: false | |
| tasks: | |
| - name: Change subnet into /22 | |
| lineinfile: dest=/etc/network/interfaces regexp='netmask 255.255.254.0' line='netmask 255.255.252.0' | |
| - name: Restarting networking service |
| # User modifyable items: ################################################# | |
| # Update to the AWS SDK Path on your system, if not default | |
| Add-Type -Path "C:\Program Files (x86)\AWS SDK for .NET\bin\AWSSDK.dll" | |
| # Update the following lines, as needed: | |
| $accessKeyID="your access key ID" | |
| $secretAccessKey="your secret access key" | |
| $instanceID="i-your instance id" | |
| $instanceEIP="x.x.x.x" |
| <?php defined('MOODLE_INTERNAL') || die(); | |
| $configuration = array ( | |
| 'siteidentifier' => NULL, | |
| 'stores' => | |
| array ( | |
| 'default_application' => | |
| array ( | |
| 'name' => 'default_application', | |
| 'plugin' => 'file', | |
| 'configuration' => |
| # असारको माया | |
| यो माया भन्ने चिज कस्तो | |
| गर्मीमा घाम नलागेको जस्तो | |
| लोडसेडीगमा tube-lite बाल्या जस्तो॥ | |
| यतिमात्र होईन, कि कसो, | |
| गाईको दुध पनि कस्तो सस्तो | |
| ncell को sim-card लिए जस्तो |