34 lines
974 B
YAML
34 lines
974 B
YAML
---
|
|
- name: Ensure Vault file exists
|
|
ansible.builtin.file:
|
|
path: "{{ proxmox_vault_file }}"
|
|
state: touch
|
|
mode: "0600"
|
|
|
|
- name: Decrypt vm vault file
|
|
ansible.builtin.shell: cd ../; ansible-vault decrypt "./playbooks/{{ proxmox_vault_file }}"
|
|
ignore_errors: true
|
|
no_log: true
|
|
|
|
- name: Load existing vault content
|
|
ansible.builtin.slurp:
|
|
src: "{{ proxmox_vault_file }}"
|
|
register: vault_content
|
|
no_log: true
|
|
|
|
- name: Parse vault content as YAML
|
|
ansible.builtin.set_fact:
|
|
vault_data: "{{ (vault_content['content'] | b64decode | from_yaml) if (vault_content['content'] | length > 0) else {} }}"
|
|
no_log: true
|
|
|
|
- name: Update Vault data
|
|
ansible.builtin.include_tasks: 15_create_secret.yml
|
|
loop: "{{ proxmox_vms | map(attribute='name') }}"
|
|
loop_control:
|
|
loop_var: "vm_name"
|
|
|
|
- name: Encrypt vm vault file
|
|
ansible.builtin.shell: cd ../; ansible-vault encrypt "./playbooks/{{ proxmox_vault_file }}"
|
|
ignore_errors: true
|
|
no_log: true
|