ansible: updated readme regarding secret handling
This commit is contained in:
@ -1,6 +1,6 @@
|
|||||||
# Ansible Playbook for Proxmox VM Management
|
# Ansible Playbook for Proxmox VM Management
|
||||||
|
|
||||||
This Ansible playbook automates the creation, deletion, and configuration of
|
This Ansible playbook automates the creation, deletion, and configuration of
|
||||||
virtual machines (VMs) on a Proxmox server.
|
virtual machines (VMs) on a Proxmox server.
|
||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
@ -30,9 +30,33 @@ virtual machines (VMs) on a Proxmox server.
|
|||||||
multiple groups depending on the types of hosts.
|
multiple groups depending on the types of hosts.
|
||||||
|
|
||||||
3. Add group-related variables to the group file under the `group_vars` directory
|
3. Add group-related variables to the group file under the `group_vars` directory
|
||||||
and individual host-related variables to the files under the `host_vars`
|
and individual host-related variables to the files under the `host_vars`
|
||||||
directory. Ansible will automatically pick up these variables.
|
directory. Ansible will automatically pick up these variables.
|
||||||
|
|
||||||
|
4. Add the following secrets to the ansible-vault:
|
||||||
|
- proxmox_api_token_id
|
||||||
|
- proxmox_api_token
|
||||||
|
- ansible_proxmox_user
|
||||||
|
- ansible_vm_user
|
||||||
|
- proxmox_user
|
||||||
|
- ansible_ssh_private_key_file
|
||||||
|
- ciuser
|
||||||
|
- cipassword
|
||||||
|
|
||||||
|
One can create the secret file using the following command:
|
||||||
|
```sh
|
||||||
|
ansible-vault create secrets/vault.yml
|
||||||
|
```
|
||||||
|
|
||||||
|
To encrypt and decrypt the file, use the following commands:
|
||||||
|
```sh
|
||||||
|
ansible-vault encrypt secrets/vault.yml
|
||||||
|
ansible-vault decrypt secrets/vault.yml
|
||||||
|
```
|
||||||
|
The password for vault file can be stored in a file or can be provided during
|
||||||
|
the encryption/decryption process. The password file location can be specified
|
||||||
|
in the `ansible.cfg` file.
|
||||||
|
|
||||||
## Playbooks
|
## Playbooks
|
||||||
|
|
||||||
### Create VM
|
### Create VM
|
||||||
@ -72,7 +96,7 @@ ansible-playbook playbooks/configure-vms.yaml --limit vm6
|
|||||||
|
|
||||||
## Variables
|
## Variables
|
||||||
|
|
||||||
The playbooks use the following variables, which can be customized in the
|
The playbooks use the following variables, which can be customized in the
|
||||||
`group_vars/proxmox.yml` file:
|
`group_vars/proxmox.yml` file:
|
||||||
|
|
||||||
- `vm_id`: The ID of the VM
|
- `vm_id`: The ID of the VM
|
||||||
|
|||||||
Reference in New Issue
Block a user