Ansible Vault加密

Ansible Vault概述

• Ansible Vault做爲Ansible的一項新功能，可將例如：password,keys等敏感數據文件進行加密處理，而非存放在明文的playbook中或roles中。
  幫助：ansible-vault --help
  加密一個文件：
• ansible-vault encrypt include.yml
  查看一個文件

[root@m01 m01]# ansible-vault view include.yml 
Vault password: 
- import_playbook: handler.yml
- import_playbook: when.yml 

修改加密的文件內容

• ansible-vault edit include.yml

rekey 修改密碼

[root@m01 m01]# ansible-vault rekey include.yml 
Vault password: 
New Vault password: 
Confirm New Vault password: 
Rekey successful

執行加密的playbook

echo "lcc" > ansible.pass
ansible-playbook include.yml  --vault-password-file=ansible.pass