Howto read variables from an vaut encrypted file

[necc...@gmail.com]

Hi all,

the following task may sound easy but actually it fails all the time ...

I want to store my password in a variable and put it into an ansible-vault encrypted file.
The content of this file will look like this:

---
root_pass_sirius: "{{ TesT1234 }}"

Now my check.yml shall read the encrypted file, get the password and login

---
- hosts: sirius
  remote_user: ansible
#  gather_facts: no
  become: yes
  become_method: su
  vars_files:
     - enc_vars.yml

  vars:
     ansible_become_pass: '{{ root_pass_sirius }}'

But the login fails with:

FAILED! => {
    "msg": "The field 'become_pass' has an invalid value, which includes an undefined variable. The error was: {{ Test1234 }}: 'TesT1234' is undefined\nexception type: <class 'ansible.errors.AnsibleUndefinedVariable'>\nexception: {{ TesT1234 }}: 'TesT1234' is undefined"
}

So it looks like ansible is unable to get the variable out of the encrypted file ... but WHY ?

[Brian Coca]

Ansilbe reads the 'root_pass_sirus' variable fine, the problem is that
'TesT1234' variable isn't defined anywhere.


--
----------
Brian Coca

[necc...@gmail.com]

Hi Brian,

of course not. it's supposed to be the value of 'root_pass_sirus' ...

[Richard Sobey]

My limited understanding is that this:

root_pass_sirius: "{{ TesT1234 }}"

..is definting another variable called "TesT1234" rather than assigning the literal "TesT1234" to the variable "root_pass_sirius" like:

root_pass_sirius: "TesT1234" 

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscribe@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/fb17c895-772f-4e03-a8fe-dc41cdf7b8e2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[necc...@gmail.com]

unbeliveable ... but that was it !!
Thanks a lot :)

[Michael-John Turner]

On Wed, Mar 07, 2018 at 09:07:53PM +0000, necc...@gmail.com wrote:
>So it looks like ansible is unable to get the variable out of the
>encrypted
>file ... but WHY ?

Brian provided a clue in his answer, but to make it more explicit:
root_pass_sirius is not correctly declared.

Instead of:
root_pass_sirius: "{{ TesT1234 }}"
it should be:
root_pass_sirius: "TesT1234"

You want the password to have the value "TesT1234" - in the incorrect
declaration, it's being set to the value of a variable called TesT1234,
which doesn't exist. Remove the {{ }} and it'll work.

Cheers, MJ
--
Michael-John Turner * m...@mjturner.net * http://mjturner.net/