aboutsummaryrefslogtreecommitdiff
path: root/tools
diff options
context:
space:
mode:
authorAllen Gao <wanlong.gao@easystack.cn>2016-01-20 22:02:20 +0800
committerAllen Gao <wanlong.gao@easystack.cn>2016-01-27 06:24:59 +0800
commit0f01d3ebc7c96265c1a8f304ad72ed5e773b2178 (patch)
tree96b03efc83ebe12c1671cb47c7573658f8acdaee /tools
parent2a815984348807e4db44ec1434d6f35d236ee1ec (diff)
downloadkolla-0f01d3ebc7c96265c1a8f304ad72ed5e773b2178.tar.gz
kolla-0f01d3ebc7c96265c1a8f304ad72ed5e773b2178.zip
Add the keyfile option to decrypt the passwords.yml
The passed keyfile path is used to decrypt the passwords.yml which encrypted by the ansible vault. Partially-Implements: blueprint encrypt-sensitive-info DocImpact Change-Id: Ifaebf464478cde99e896c13b375cfaf9282ee576
Diffstat (limited to 'tools')
-rwxr-xr-xtools/kolla-ansible13
1 files changed, 11 insertions, 2 deletions
diff --git a/tools/kolla-ansible b/tools/kolla-ansible
index 021af79ac..73d7316f5 100755
--- a/tools/kolla-ansible
+++ b/tools/kolla-ansible
@@ -30,6 +30,7 @@ Usage: $0 COMMAND [options]
Options:
--inventory, -i <inventory_path> Specify path to ansible inventory file
--playbook, -p <playbook_path> Specify path to ansible playbook file
+ --keyfile, -k <key_file> Specify path to ansible vault keyfile
--help, -h Show this usage information
--tags, -t <tags> Only run plays and tasks tagged with these values
@@ -41,9 +42,11 @@ Commands:
EOF
}
-SHORT_OPTS="hi:p:t:"
-LONG_OPTS="help,inventory:,playbook:,tags:"
+
+SHORT_OPTS="hi:p:t:k:"
+LONG_OPTS="help,inventory:,playbook:,tags:,keyfile:"
ARGS=$(getopt -o "${SHORT_OPTS}" -l "${LONG_OPTS}" --name "$0" -- "$@") || { usage >&2; exit 2; }
+
eval set -- "$ARGS"
find_base_dir
@@ -69,6 +72,12 @@ while [ "$#" -gt 0 ]; do
shift 2
;;
+ (--keyfile|-k)
+ VAULT_PASS_FILE="$2"
+ EXTRA_OPTS="$EXTRA_OPTS --vault-password-file=$VAULT_PASS_FILE"
+ shift 2
+ ;;
+
(--help|-h)
usage
shift