Ansible vars_prompt
up vote
0
down vote
favorite
When using Ansible vars_prompt there's an option to encrypt the data inputted for say a password, however when the variable used is in a playbook e.g. to pass the password the encrypted password gets passed. There doesn't seem to be any way of "decrypting" the password, like you would in Ansible Vault.
I have 3 questions:
If I use this to encrypt variables (let's say passwords) how do I de-crypt them to use them in a playbook?
Are these variables ever written to the disk or are they only held in memory?
If I do not encrypt the variables (let's say a password again) how significant would the exposure be on the sensitive information contained within the variables?
Thanks for any help in figuring this out!
ansible
asked Nov 5 at 17:55
Oliver L
1
add a comment |
up vote
0
down vote
favorite
When using Ansible vars_prompt there's an option to encrypt the data inputted for say a password, however when the variable used is in a playbook e.g. to pass the password the encrypted password gets passed. There doesn't seem to be any way of "decrypting" the password, like you would in Ansible Vault.
I have 3 questions:
If I use this to encrypt variables (let's say passwords) how do I de-crypt them to use them in a playbook?
Are these variables ever written to the disk or are they only held in memory?
If I do not encrypt the variables (let's say a password again) how significant would the exposure be on the sensitive information contained within the variables?
Thanks for any help in figuring this out!
ansible
asked Nov 5 at 17:55
Oliver L
1
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
When using Ansible vars_prompt there's an option to encrypt the data inputted for say a password, however when the variable used is in a playbook e.g. to pass the password the encrypted password gets passed. There doesn't seem to be any way of "decrypting" the password, like you would in Ansible Vault.
I have 3 questions:
If I use this to encrypt variables (let's say passwords) how do I de-crypt them to use them in a playbook?
Are these variables ever written to the disk or are they only held in memory?
If I do not encrypt the variables (let's say a password again) how significant would the exposure be on the sensitive information contained within the variables?
Thanks for any help in figuring this out!
ansible
asked Nov 5 at 17:55
Oliver L
1
When using Ansible vars_prompt there's an option to encrypt the data inputted for say a password, however when the variable used is in a playbook e.g. to pass the password the encrypted password gets passed. There doesn't seem to be any way of "decrypting" the password, like you would in Ansible Vault.
I have 3 questions:
If I use this to encrypt variables (let's say passwords) how do I de-crypt them to use them in a playbook?
Are these variables ever written to the disk or are they only held in memory?
If I do not encrypt the variables (let's say a password again) how significant would the exposure be on the sensitive information contained within the variables?
Thanks for any help in figuring this out!
ansible
ansible
asked Nov 5 at 17:55
Oliver L
1
asked Nov 5 at 17:55
Oliver L
1
asked Nov 5 at 17:55
Oliver L
1
asked Nov 5 at 17:55
Oliver L
1
asked Nov 5 at 17:55
Oliver L
1
1
add a comment |
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53159699%2fansible-vars-prompt%23new-answer', 'question_page');
}
);
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
