chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-24 14:54:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(ansible): wire vault_password_file to repo-root .vault_pass

Browse Source 
Both ansible.cfg files lacked vault_password_file, causing
'Attempting to decrypt but no vault secrets found' when running any
playbook that auto-loads the encrypted group_vars/all/ files.

- ansible.cfg (root): vault_password_file = .vault_pass
- infrastructure/ansible.cfg: vault_password_file = ../.vault_pass

.vault_pass is gitignored. Each machine needs its own copy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chrisfu 2026-05-27 21:05:49 -07:00
parent c1d2a91991
commit 9571f42568
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible.cfg
View File

@ -4,6 +4,7 @@ roles_path = infrastructure/roles
collections_paths = infrastructure/collections collections_paths = infrastructure/collections
interpreter_python = auto_silent interpreter_python = auto_silent
deprecation_warnings = False deprecation_warnings = False
vault_password_file = .vault_pass
callback_plugins = lib/ansible/plugins/callback callback_plugins = lib/ansible/plugins/callback
callbacks_enabled = run_logger callbacks_enabled = run_logger
stdout_callback = default stdout_callback = default

1
infrastructure/ansible.cfg
View File

@ -5,6 +5,7 @@ inventory = inventory/hosts.ini
roles_path = roles roles_path = roles
collections_paths = collections collections_paths = collections
interpreter_python = auto_silent interpreter_python = auto_silent
vault_password_file = ../.vault_pass
callback_plugins = ../lib/ansible/plugins/callback callback_plugins = ../lib/ansible/plugins/callback
callbacks_enabled = run_logger callbacks_enabled = run_logger
# For Ansible < 2.13, we use community.general.yaml # For Ansible < 2.13, we use community.general.yaml