ansible3-加密

botang

v3-1_srvgroup_E.yml:

1. ---
   
2. - name: Create User Accounts for All Machines
   
3.   hosts: srvgroup
   
4.   vars_files: ./v3.d/secret.yml
   
5.   tasks:
   
6.   - name: Createing User from secret.yml
   
7.     user:
   
8.       name: "{{ username }}"
   
9.       password: "{{ password }}"
   
10.       state: present
    

复制代码

[student@workstation ansible]$ tree  v3.d
v3.d
├── local.fact
├── secret.yml
└── vault.pass

0 directories, 3 files


secret.yml:
[student@workstation v3.d]$ ansible-vault --vault-password-file=vault.pass  view secret.yml
username: spoto
password: $6$2m69xP7Zs4IXI40U$nIs/Ifkobz7uF4kmcGTl8814wwmcho95fN2kqDCu/DM2QNBm6FFys1gA1r78xlg6IJcoVbj2Uebrnwsu3u2tV.
[student@workstation v3.d]$

1. [student@workstation v3.d]$ ansible-vault edit --vault-password-file=vault.pass  secret.yml

复制代码

1. username: spoto
   
2. password: "{{ 'redhat' | password_hash('sha512') }}"
   

复制代码

1. ---
   
2. - name: 测试
   
3.   hosts: localhost
   
4.   connection: local
   
5.   tasks:
   
6.   - name: 任务1
   
7.     debug:
   
8.       msg: "{{ 'redhat123' | password_hash('sha512')}}"
   

复制代码