Move VM secrets to a separate password store directory

This commit is contained in:
Timotej Lazar 2024-04-08 15:06:18 +02:00
parent 6dcae194d7
commit 000f625988
5 changed files with 10 additions and 10 deletions

View file

@ -28,8 +28,8 @@
command: ktutil
responses:
'.*:':
- 'add_entry -password -p {{ lookup("passwordstore", "hosts/"~inventory_hostname, subkey="ldap_user") }} -k 1 -e aes256-cts-hmac-sha1-96'
- '{{ lookup("passwordstore", "hosts/"~inventory_hostname, subkey="ldap_pass") }}'
- 'add_entry -password -p {{ lookup("passwordstore", "vm/"~inventory_hostname, subkey="ldap_user") }} -k 1 -e aes256-cts-hmac-sha1-96'
- '{{ lookup("passwordstore", "vm/"~inventory_hostname, subkey="ldap_pass") }}'
- 'write_kt /etc/krb5.keytab'
- 'exit'
args: