kayobe/config-dump-vault-edc615e475f234ac.yaml at 3942d29448d16b4ef8e9682b4d08fd03d1dbe2cd - kayobe - OpenDev: Free Software Needs Free Tools

openstack/kayobe

Mark Goddard 78702d0e30 Fix configuration dump with inline encrypted variables

If inline Ansible vault encryption is used to define an encrypted
variable in kayobe-config, running 'kayobe configuration dump -l <host>'
fails with the following:

  Failed to decode config dump YAML file /tmp/tmp_fg1bv_j/localhost.yml:
  ConstructorError(None, None, "could not determine a constructor for
  the tag '!vault'", <yaml.error.Mark object at 0x7f1e5c7404c0>)

This change fixes the error by using the Ansible YAML loader which
supports the vault tag. Any vault encrypted variables are sanitised in
the dump output. Note that variables in vault encrypted files are not
sanitised.

Change-Id: I4830500d3c927b0689b6f0bca32c28137916420b
Closes-Bug: #2031390

2023-11-30 10:55:46 +01:00

8 lines

267 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fixes an issue where ``kayobe configuration dump`` would fail when
     variables are encrypted using Ansible Vault. Encrypted variables are now
     sanitised in the dump output. `LP#2031390
     <https://bugs.launchpad.net/kayobe/+bug/2031390>`__