Can I set ansible_ssh_pass in a task?

[Larry Fast]

I'm using a database system for passwords. It has a CLI for pulling data. For each server I would like to do something like

- hosts: all

  gather_facts: no

  tasks:

     local_action:  ansible_ssh_pass=`db_cli cli_params`

I realize this code is complete invalid. Can I do this in a task, a programatic variables section or do I need to write a dynamic inventory to access my database?

[Michael DeHaan]

You can use "set_fact" to do this.

There is a slight question of whether this actually works, as I haven't tested it :)

Really, it sounds like you should look into an external inventory script for me, but if you have a CLI interface, it will hit that CLI lots of times and potentially overwhelm the local or remote end if you use large fork counts or large numbers of hosts - I'd see if it had an API if possible.

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/59251be5-e4dd-41a1-ad5c-dfcd83bee3d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Larry Fast]

You can use "set_fact" to do this.

Thanks that worked out fine. 

It sounds like you should look into an external inventory script.

What I working with is CyberArk. It's primarily a secure password management system that does things like automatic rollover and hidden login. So I'm looking for ways to pull the passwords into my existing inventory.

Can Ansible reference two inventories?  Or is there a sample external inventory script that pulls in a 'normal' inventory and then allows me to add to it dynamically?  I suppose I could build off your existing inventory import code.

[Michael DeHaan]

"Can Ansible reference two inventories?  "

If both inventories are in the same directory, "-i directory_name" will load them both.

Any number of them can be executable or static (INI based) and group_vars/ and host_vars/ variables in that directory will also be loaded for each.

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/efbdc502-8f7d-4117-bd7e-fb1e5831e2d9%40googlegroups.com.

[AnsiNoob]

were you able to use Ansible to pull passwords automatically from CyberArk?