dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

Protect vault secret with GPG 

Encrypting the vault password with GPG protects the key when stored on
disk and allows it to be accessed non-interactively, as long as the
GnuPG agent is set up correctly.
jenkins-master
Dustin 2018-01-29 14:53:57 -06:00
parent 940ea5efb2
commit 20fb830eda
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -1 +1,2 @@
/.vault-secret.gpg
.fact-cache .fact-cache

2
.vault-secret.sh Executable file
View File

@ -0,0 +1,2 @@
#!/bin/sh
exec gpg --quiet --batch --decrypt "${0%.sh}.gpg"

2
ansible.cfg
View File

@ -6,3 +6,5 @@ inventory = hosts
gathering = smart gathering = smart
fact_caching = jsonfile fact_caching = jsonfile
fact_caching_connection = .fact-cache fact_caching_connection = .fact-cache
vault_password_file = .vault-secret.sh