64 lines
1.9 KiB
YAML
64 lines
1.9 KiB
YAML
- name: Récupérer plusieurs secrets
|
|
hosts: localhost
|
|
vars:
|
|
ansible_vars_plugins:
|
|
- community.general.bitwarden_secrets_manager
|
|
bitwarden_secrets_manager:
|
|
api_url: "https://vault.jingoh.fr"
|
|
client_id: "0825576f-7aff-4756-814a-60b1f7241ecc"
|
|
client_secret: "ljnm14UGodGL3bRgJr01jkOAbkvzuC"
|
|
bw_session: cr5hIsIyteLzS/xdit0hhF/jpdavsyuu1BPztltjsodjEQsXf9ComunjGaTkLJBg0UzgA/yviTTwsGZ9AqGBxg==
|
|
tasks:
|
|
|
|
# npm install -g @bitwarden/cli
|
|
# bw config server https://vault.jingoh.fr
|
|
# bw login --apikey
|
|
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:20:04]
|
|
# └─[1] <git:(main 498f2ac) > bw login --apikey
|
|
# ? client_id: user.XXXXXXXXXXXXXXX
|
|
# ? client_secret: XXXXXXXXXXXXXXXX
|
|
# You are logged in!
|
|
# bw unlock
|
|
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:21:27]
|
|
# └─[1] <git:(main 498f2ac) > bw unlock
|
|
# ? Master password: [hidden]
|
|
# Your vault is now unlocked! -> BW_SESSION token
|
|
# export BW_SESSION="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
|
|
|
|
- name: Liste des secrets
|
|
debug:
|
|
msg: "{{ item }}"
|
|
loop:
|
|
#! Attention espace dans le nom compte !!
|
|
- "{{ lookup('community.general.bitwarden', 'gitea admin ') }}"
|
|
- "{{ lookup('community.general.bitwarden', 'Amazone') }}"
|
|
|
|
|
|
|
|
|
|
# api_url: "https://vault.jingoh.fr"
|
|
# client_id: "user.0825576f-7aff-4756-814a-60b1f7241ecc"
|
|
# client_secret: "2SLPAQxrLk16e8hPyfLoIA5TO36E7w"
|
|
|
|
|
|
|
|
|
|
# La régénération de la clé API invalidera la clé précédente. Vous pouvez régénérer votre clé API si vous estimez que la clé actuelle n'est plus utilisable en toute sécurité.
|
|
# Attention
|
|
# Votre clé API est un mécanisme d'authentification alternatif. Elle devrait être tenue secrète.
|
|
# Identifiants du client OAuth 2.0
|
|
|
|
# client_id:
|
|
# user.0825576f-7aff-4756-814a-60b1f7241ecc
|
|
|
|
# client_secret:
|
|
# ljnm14UGodGL3bRgJr01jkOAbkvzuC
|
|
|
|
# scope:
|
|
# api
|
|
|
|
# grant_type:
|
|
# client_credentials
|
|
|
|
|