Hello everyone I have to encrypt content in some configuration files on a target host by using encryption utilities provided by middleware (JBoss, Openliberty). The nicest solution would be, to encrypt the text while the template (for the config file) is being processed.
All that is needed is something like the "pipe" lookup plugin, just executed on the target machine of the current task. I know that lookup plugins are executed on the Ansible controller, but nothing should stop me from writing my own lookup-plugin which does the remote execution. Of course this would drastically slow down the template processing but it would be worth it. My question is, is this feasible at all? Or is there some logic in how the lookup plugin is called which prevent us from doing something like this? What I dont want to do is to roll a custom "ssh connect-here-logic", since our envrionments are quite complex so I hoped that a potential plugin could use some runtime information and just execute a remote command somehow. Of course the other solution is to write the password from the template with some prefex and then replace those things on the target machine using some facts. regards Marc -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/eac866e5-f3ac-4b0d-b184-bc1c1854f6a9n%40googlegroups.com.
