3.3. Archiving a secret in a standard user vault in IdM using Ansible

Procedure

1. Navigate to the ~/MyPlaybooks/ directory:

   $ cd ~/MyPlaybooks/

2. Make a copy of the data-archive-in-symmetric-vault.yml Ansible playbook file from the relevant collections directory. For example:

   $ cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/vault/data-archive-in-symmetric-vault.yml data-archive-in-standard-vault-copy.yml

3. Open the data-archive-in-standard-vault-copy.yml file for editing.

4. Adapt the file by setting the following variables in the freeipa.ansible_freeipa.ipavault task section:

   • Set the ipaadmin_principal variable to idm_user.
   • Set the ipaadmin_password variable to the password of idm_user.
   • Set the user variable to idm_user.
   • Set the name variable to my_vault.
   • Set the in variable to the full path to the file with sensitive information.

   • Set the action variable to member.

     This the modified Ansible playbook file for the current example:

   ---
   - name: Tests
     hosts: ipaserver
     gather_facts: false
   
     tasks:
     - freeipa.ansible_freeipa.ipavault:
         ipaadmin_principal: idm_user
         ipaadmin_password: idm_user_password
         user: idm_user
         name: my_vault
         in: /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/vault/password.txt
         action: member

5. Save the file.

6. Run the playbook:

   $ ansible-playbook -v -i inventory data-archive-in-standard-vault-copy.yml