36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
|
|
---
|
|
- name: Swarm
|
|
hosts: testswarm
|
|
become: true
|
|
gather_facts: false
|
|
|
|
|
|
# apt-get install sshpass
|
|
|
|
# #
|
|
# # @author Stéphane Gratias (2021).
|
|
#
|
|
|
|
pre_tasks:
|
|
|
|
|
|
# "{{ lookup('hashi_vault', 'secret=apps/data/my-app token=s.7z1Vxxx url=https://vault.kar.int')['data']['username'] }}"
|
|
|
|
# pip install hvac
|
|
|
|
# https://open-amt-cloud-toolkit.github.io/docs/2.0/Docker/dockerLocal_prodVault/
|
|
|
|
# https://elatov.github.io/2022/01/using-hashicorp-vault-with-ansible/
|
|
|
|
# vault secrets enable -path=apps kv-v2
|
|
# vault kv get apps/my-app
|
|
# vault token create -explicit-max-ttl=8760h -policy=test -ttl=720h -renewable=true -display-name=test
|
|
|
|
# - ansible.builtin.debug:
|
|
# msg: "{{ lookup('community.hashi_vault.hashi_vault', 'secret=/apps/my-app:test token=hvs.CAESIB4eVBWqRNDgcGXJpmvBe9nCpvCJ9-kM-OXq2p1WGlfBGh4KHGh2cy4xdFBYNnNMUEROOVlxOWFad3hERHI5Ulc url=http://myvault:8200') }}"
|
|
|
|
- name: Return all secrets from a path
|
|
delegate_to: localhost
|
|
ansible.builtin.debug:
|
|
msg: "{{ lookup('community.hashi_vault.hashi_vault', 'secret=apps/data/postgres token=prout url=https://hash.jingoh.fr') }}" |