Closed msurovcak closed 5 years ago
I do run Kitchen using kitchen-ec2 and without any password/certificate pre-baked in the image as I am using AWS EC2 get-password in pipelines.
kitchen-ec2
This allow passing password from transport (where it is fetched with instance key) to Ansible as: -e ansible_password='password_from_transport'
-e ansible_password='password_from_transport'
Another option would be having static key and it's private part visible from CI and use some hook, this seems as an elegant way.
Sorry for a mess, created new #53 from our company repo
I do run Kitchen using
kitchen-ec2
and without any password/certificate pre-baked in the image as I am using AWS EC2 get-password in pipelines.This allow passing password from transport (where it is fetched with instance key) to Ansible as:
-e ansible_password='password_from_transport'
Another option would be having static key and it's private part visible from CI and use some hook, this seems as an elegant way.