warengroup/init.sh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove Hashicorp Vault password

Browse Source
This commit is contained in:
Christer Warén 2023-12-30 12:48:43 +02:00
parent ef4452e5d8
commit 36162b861b
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
init.sh
View File

@ -138,7 +138,6 @@ if [ ! -f ~/.ansible/vars.yml ]; then
openssl rand -base64 64 | tr -d '\n' | head -c 64 > ~/.ansible/vault.yml openssl rand -base64 64 | tr -d '\n' | head -c 64 > ~/.ansible/vault.yml
ANSIBLE_VAULT_SECRET=$(<~/.ansible/vault.yml) ANSIBLE_VAULT_SECRET=$(<~/.ansible/vault.yml)
HASHICORP_VAULT_SECRET=$(openssl rand -base64 64 | tr -d '\n' | head -c 64)
echo "---" > ~/.ansible/vars.yml echo "---" > ~/.ansible/vars.yml
echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml
@ -148,7 +147,6 @@ if [ ! -f ~/.ansible/vars.yml ]; then
echo " secret: $ANSIBLE_VAULT_SECRET" >> ~/.ansible/vars.yml echo " secret: $ANSIBLE_VAULT_SECRET" >> ~/.ansible/vars.yml
echo " hashicorp:" >> ~/.ansible/vars.yml echo " hashicorp:" >> ~/.ansible/vars.yml
echo " domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml echo " domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml
echo " password: $HASHICORP_VAULT_SECRET" >> ~/.ansible/vars.yml
/opt/ansible/bin/ansible-vault encrypt --vault-password-file ~/.ansible/vault.yml ~/.ansible/vars.yml > /dev/null /opt/ansible/bin/ansible-vault encrypt --vault-password-file ~/.ansible/vault.yml ~/.ansible/vars.yml > /dev/null
fi fi