6a600eb981
Best practices should referring to at least basic encryption of data including SSH keypairs, PKI certificates, user_secrets, etc. This collection aims to help/assist with managing data in encrypted state, in case ansuble_vault is used as an encryption mechanism. The collection should allow adding more supproted mechanism, like SOPS for managing data encryption in the future. Change-Id: I8af3118946682af4ec31bb1d4f6bea93be34f68c
12 lines
218 B
YAML
12 lines
218 B
YAML
---
|
|
|
|
- name: Encrypt secrets
|
|
hosts: encrypt-default
|
|
tasks:
|
|
|
|
- name: Importing ansible_vault role
|
|
ansible.builtin.import_role:
|
|
name: ansible_vault
|
|
vars:
|
|
ansible_vault_action: encrypt
|