How to do password management

Archives Ansible Project
1

Hi

Struggling to get my head around this. According to the best practices, I’ve put the root password for all the vms in a vault encrypted file, and the variables are vault_ prefixed as suggested in http://docs.ansible.com/ansible/playbooks_best_practices.html#best-practices-for-variables-and-vaults . I don

My directory structure:
ls /etc/ansible/group_vars/

vars
vault

cat vars
ansible_become_user=vault_ansible_become_user
ansible_become_pass=vault_ansible_become_pass

And vault contains the secure data, and is ansible-vault encrypted.

How do I then pull that into a playbook/command line argument?

2

The group_vars/* adjacent to inventory or play are automatically read,
I would just set ansible_become_pass there.

Also note that these must be YAML formatted files, not KEY=VALUE pairs.