Using Ansible Vault in a team

preview_player
Показать описание
Рекомендации по теме
Комментарии
Автор

Good video. Minor nit-pick - at 2:31 I think it should be "everyone's public key is used to encrypt the password file's (symmetric) encryption key" - instead of "everyone's public key is used to sign the password file" - assuming I've got how ggp works correctly...

That way anyone with at least one of the private keys can read and edit the file (if you edit then gpg/pgp will generate a new random symmetric key for the file, and encrypt multiple copies of this key - once with each user's public key - so that everyone can still edit/view the new copy).

Tim_Small
Автор

Ha iI accidentally found this thing ... nice to see you again :)

darko_comet
Автор

Ansible supports "passwordstore" lookups, which is a similar thing, but uses a nice CLI to wrap it all.

squelchedotter