I\'m trying to understand how to encrypt single variables with vault. First I encrypt the string with ansible-vault encrypt_string -n -p, then I write the outpu
i have implemented same for sending email using mail module and it's working as expected.
ansible-vault encrypt_string yourgmailapppassword --name gmail_password
use above method to encrypt gmail app password using ansible vault string option and define encrypted variable into the playbook.
cat fetch-users-deatils.yml
- name: Linux servers user audit report preparation
hosts: "{{ HOSTS }}"
roles:
- user-collections
- name: Refreshing user Dashboard & sending email from localhost
hosts: localhost
become: false
vars:
- gmail_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
62613232383962323430633831113465356231563163366235353034393230656331663436646233
3266353862303738303737383530313664356135336661390a336562613436626665333833323030
61393135643433313930643337363465343332353716333831222766376137396430426361663633
6233313433633231320a663435636230636431643731333166366435346564316331323361633566
38622138392437888466666535323432653034323936353961646233613437343831
tasks:
- name: Collecting the user details information and recreating the users dashboard
script: dashboard_user.sh
tags: user_dashboard
- name: User Audit data output file stored on below location
debug:
msg:
/tmp/user_collection/user_details.csv
- name: 'Sending Ansible users report email'
mail:
host: smtp.gmail.com
subtype: html
port: 587
password: "{{ gmail_password }}"
to: abcdefghijkl@gmail.com
from: abcdefghijkl@gmail.com
username: abcdefghijkl@gmail.com
subject: User details report
attach: /tmp/user_collection/user_details.csv
body: {{ lookup('file', '/tmp/user_collection/user_details.csv') }}
delegate_to: localhost
below is ansible playbook execution command
ansible-playbook fetch-users-deatils.yml -e "HOSTS=all" --ask-vault-pass