ansible: updated readme regarding secret handling
This commit is contained in:
		| @ -1,6 +1,6 @@ | ||||
| # Ansible Playbook for Proxmox VM Management | ||||
|  | ||||
| This Ansible playbook automates the creation, deletion, and configuration of  | ||||
| This Ansible playbook automates the creation, deletion, and configuration of | ||||
| virtual machines (VMs) on a Proxmox server. | ||||
|  | ||||
| ## Prerequisites | ||||
| @ -30,9 +30,33 @@ virtual machines (VMs) on a Proxmox server. | ||||
|     multiple groups depending on the types of hosts. | ||||
|  | ||||
| 3. Add group-related variables to the group file under the `group_vars` directory | ||||
|    and individual host-related variables to the files under the `host_vars`  | ||||
|    and individual host-related variables to the files under the `host_vars` | ||||
|   directory. Ansible will automatically pick up these variables. | ||||
|  | ||||
| 4. Add the following secrets to the ansible-vault: | ||||
|    - proxmox_api_token_id | ||||
|    - proxmox_api_token | ||||
|    - ansible_proxmox_user | ||||
|    - ansible_vm_user | ||||
|    - proxmox_user | ||||
|    - ansible_ssh_private_key_file | ||||
|    - ciuser | ||||
|    - cipassword | ||||
|  | ||||
|   One can create the secret file using the following command: | ||||
|   ```sh | ||||
|   ansible-vault create secrets/vault.yml | ||||
|   ``` | ||||
|  | ||||
|   To encrypt and decrypt the file, use the following commands: | ||||
|   ```sh | ||||
|   ansible-vault encrypt secrets/vault.yml | ||||
|   ansible-vault decrypt secrets/vault.yml | ||||
|   ``` | ||||
|   The password for vault file can be stored in a file or can be provided during | ||||
|   the encryption/decryption process. The password file location can be specified | ||||
|   in the `ansible.cfg` file. | ||||
|  | ||||
| ## Playbooks | ||||
|  | ||||
| ### Create VM | ||||
| @ -72,7 +96,7 @@ ansible-playbook playbooks/configure-vms.yaml --limit vm6 | ||||
|  | ||||
| ## Variables | ||||
|  | ||||
| The playbooks use the following variables, which can be customized in the  | ||||
| The playbooks use the following variables, which can be customized in the | ||||
| `group_vars/proxmox.yml` file: | ||||
|  | ||||
| - `vm_id`: The ID of the VM | ||||
|  | ||||
		Reference in New Issue
	
	Block a user