ansible-vault.md 1.2 KB

ansible-vault

Ansible ํ”„๋กœ์ ํŠธ ๋‚ด์—์„œ ๊ฐ’, ๋ฐ์ดํ„ฐ ๊ตฌ์กฐ ๋ฐ ํŒŒ์ผ์„ ์•”ํ˜ธํ™”ํ•˜๊ณ  ํ•ด๋…. ๋” ๋งŽ์€ ์ •๋ณด: https://docs.ansible.com/ansible/latest/user_guide/vault.html#id17.

  • ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์ž…๋ ฅํ•˜๋ผ๋Š” ๋ฉ”์‹œ์ง€๊ฐ€ ํ‘œ์‹œ๋œ ์ƒˆ๋กœ์šด ์•”ํ˜ธํ™”๋œ ๋ณผํŠธ ํŒŒ์ผ์„ ๋งŒ๋“ฌ:

ansible-vault create {{๋ณผํŠธ_ํŒŒ์ผ}}

  • ๋ณผํŠธ ํ‚ค ํŒŒ์ผ์„ ์‚ฌ์šฉํ•˜์—ฌ, ์•”ํ˜ธํ™”๋œ ์ƒˆ ๋ณผํŠธ ํŒŒ์ผ์„ ๋งŒ๋“ฌ:

ansible-vault create --vault-password-file {{๋น„๋ฐ€๋ฒˆํ˜ธ_ํŒŒ์ผ}} {{๋ณผํŠธ_ํŒŒ์ผ}}

  • ์„ ํƒ์  ๋น„๋ฐ€๋ฒˆํ˜ธ ํŒŒ์ผ์„ ์‚ฌ์šฉํ•˜์—ฌ, ๊ธฐ์กด ํŒŒ์ผ์„ ์•”ํ˜ธํ™”:

ansible-vault encrypt --vault-password-file {{๋น„๋ฐ€๋ฒˆํ˜ธ_ํŒŒ์ผ}} {{๋ณผํŠธ_ํŒŒ์ผ}}

  • Ansible์˜ ์•”ํ˜ธํ™”๋œ ๋ฌธ์ž์—ด ํ˜•์‹์„ ์‚ฌ์šฉํ•˜์—ฌ, ๋ฌธ์ž์—ด์„ ์•”ํ˜ธํ™”ํ•˜๊ณ  ๋Œ€ํ™”ํ˜• ํ”„๋กฌํ”„ํŠธ๋ฅผ ํ‘œ์‹œ:

ansible-vault encrypt_string

  • ์•”ํ˜ธ ํŒŒ์ผ์„ ์‚ฌ์šฉํ•˜์—ฌ, ์•”ํ˜ธํ™”๋œ ํŒŒ์ผ์„ ํ•ด๋…ํ•˜๋Š” ๋ฐฉ๋ฒ•:

ansible-vault view --vault-password-file {{๋น„๋ฐ€๋ฒˆํ˜ธ_ํŒŒ์ผ}} {{๋ณผํŠธ_ํŒŒ์ผ}}

  • ์ด๋ฏธ ์•”ํ˜ธํ™”๋œ ๋ณผํŠธ ํŒŒ์ผ์„ ์ƒˆ ์•”ํ˜ธ ํŒŒ์ผ๋กœ ๋‹ค์‹œ ํ‚ค ์ง€์ •:

ansible-vault rekey --vault-password-file {{์˜ˆ์ „_๋น„๋ฐ€๋ฒˆํ˜ธ_ํŒŒ์ผ}} --new-vault-password-file {{์ƒˆ๋กœ์šด_๋น„๋ฐ€๋ฒˆํ˜ธ_ํŒŒ์ผ}} {{๋ณผํŠธ_ํŒŒ์ผ}}