3 ms·

You can also configure Ansible to lookup to Hashicorp Vault on the fly. https://docs.ansible.com/ansible/2.5/plugins/lookup/hashi_vault.html https://docs.ansib

• nineteen999 8y ago
  Unfortunately it wouldn't work for our network even if I wanted to use it, since our systems aren't allowed to connect outbound to the Internet (for good reason). I suppose I could set up a Vault server locally (?), but it's complete overkill for a problem we already solved in a simpler way. Ansible is gradually adding modules for about everything. It's come along way since I started using it back in the 1.8 or 1.9 days.
  • jyounker 8y ago
    Vault is usually hosted in-house. Vault offers features such as short-term secrets which are unique to each client. Vault itself manages creation and destruction of the credentials on the server, allowing it to enforce credential lifetimes
    • nineteen999 8y ago
      Those are neat features, but our systems do not require them, and for our small team it would be unnecessary overhead. And by in house, I presume you would mean within a cloud hosted environment, eg. AWS VDC, Google Cloud etc. in the most common case.