Yes It is.
I mean if I don't use it as a variable but directly in a task as a
parameter.
As example:
Is there a difference between
- shell: check.sh {{ lookup('hashi_vault', 'secret=secret1') }}
And
- shell: check.sh {{ password 1}}
Where password1 is defined in an inventory
It seems logical to me than the first one is safer and evaluate later
Le mercredi 20 novembre 2019 14:44:38 UTC+1, Vladimir Botka a écrit :
>
> On Wed, 20 Nov 2019 05:09:01 -0800 (PST)
> Quentin Aveno <[email protected] <javascript:>> wrote:
>
> > > When I use a lookup with vault, is the pass is store in memory when I
> use
> > > it directly in a task or pass it through a variable in an inventory ?
> Is
> > > there a significant difference ?
>
> There is no difference because of "Lazy Evaluation" ("Ansible evaluates
> any
> variables in playbook content at the last possible second."), I think. See
> https://docs.ansible.com/ansible/latest/reference_appendices/glossary.html
>
> (Is this hashi_vault plugin?)
>
> Cheers,
>
> -vlado
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/f9ebc8a3-7a81-475b-bdfa-87a53cc65fae%40googlegroups.com.
