Compare commits

...

2 Commits

Author SHA1 Message Date
Christer Warén
813d1cd38a Add Python 3 library - jmespath 2023-12-30 12:50:53 +02:00
Christer Warén
36162b861b Remove Hashicorp Vault password 2023-12-30 12:48:43 +02:00

View File

@ -28,7 +28,7 @@ mkdir -p ~/.ssh &> /dev/null
apt-get install -y python3-pip python3-venv jq git curl &> /dev/null
python3 -m venv /opt/ansible &> /dev/null
/opt/ansible/bin/pip3 install ansible hvac netaddr &> /dev/null
/opt/ansible/bin/pip3 install ansible hvac netaddr jmespath &> /dev/null
HOSTNAME=$1
if [[ -z "$HOSTNAME" || ${#HOSTNAME} -lt 5 ]]; then
@ -138,7 +138,6 @@ if [ ! -f ~/.ansible/vars.yml ]; then
openssl rand -base64 64 | tr -d '\n' | head -c 64 > ~/.ansible/vault.yml
ANSIBLE_VAULT_SECRET=$(<~/.ansible/vault.yml)
HASHICORP_VAULT_SECRET=$(openssl rand -base64 64 | tr -d '\n' | head -c 64)
echo "---" > ~/.ansible/vars.yml
echo "hostname: $HOSTNAME" >> ~/.ansible/vars.yml
@ -148,7 +147,6 @@ if [ ! -f ~/.ansible/vars.yml ]; then
echo " secret: $ANSIBLE_VAULT_SECRET" >> ~/.ansible/vars.yml
echo " hashicorp:" >> ~/.ansible/vars.yml
echo " domain: $VAULT_DOMAIN" >> ~/.ansible/vars.yml
echo " password: $HASHICORP_VAULT_SECRET" >> ~/.ansible/vars.yml
/opt/ansible/bin/ansible-vault encrypt --vault-password-file ~/.ansible/vault.yml ~/.ansible/vars.yml > /dev/null
fi