internet/community.general
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-05-07 05:42:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

prompt for new pass on create/encrypt if none specified (#28185)

Browse Source 
* prompt for new pass on create/encrypt if none specified

Make 'ansible-vault' edit or encrypt prompt for a password
if none or provided elsewhere.

Note: ansible-playbook does not prompt if not vault password
is provided

* dont show vault password prompts if not a tty
This commit is contained in:
Adrian Likins
2017-08-15 13:09:24 -04:00
committed by GitHub
parent 09cc84c796
commit 8003437ebc
2 changed files with 86 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/ansible/cli/__init__.py
View File

@@ -234,11 +234,17 @@ class CLI(with_metaclass(ABCMeta, object)):
vault_ids = CLI.build_vault_ids(vault_ids,
vault_password_files,
ask_vault_pass)
ask_vault_pass,
create_new_password)
for vault_id_slug in vault_ids:
vault_id_name, vault_id_value = CLI.split_vault_id(vault_id_slug)
if vault_id_value in ['prompt', 'prompt_ask_vault_pass']:
# prompts cant/shouldnt work without a tty, so dont add prompt secrets
if not sys.stdin.isatty():
continue
# --vault-id some_name@prompt_ask_vault_pass --vault-id other_name@prompt_ask_vault_pass will be a little
# confusing since it will use the old format without the vault id in the prompt
built_vault_id = vault_id_name or C.DEFAULT_VAULT_IDENTITY