ChameleonCloud / chi-in-a-box

Packaging the systems and operations of the Chameleon testbed
Apache License 2.0
14 stars 10 forks source link

add encrypt_file/decrypt_file methods #301

Closed msherman64 closed 3 weeks ago

msherman64 commented 3 weeks ago

Kolla ansible supports automatic decryption of vault-encrypted files in site-config. This is very useful for things like ceph authentication tokens, certificates, and so on.

Note: This CANNOT be used for the SSH key for ansible to connect to a remote host. See https://github.com/ansible/ansible/issues/22382

Add cc-ansible wrappers for vault encrypt and vault decrypt to make this easy.