Hello guys, I have a question : I have a

Question

Hello guys, I have a question : I have a

jenkins instance (no ssh access) I have ansible plugin and I use all the time the inventory(ip/ssh passwords) and the playbooks as parameters for the job. I want to save it as files in the project. does saving the inventory file as plain text is a very bad practice? I didn't really know how to adress this from a security perspective

0

17.09.2019

3 ответов

5 просмотров

XZainethe Ombperettasciente LeGraetta

Secrets should be stored and retreived from a secret store in your environment. Secrets such as passwords, certs, keys, tokens, sensitive information. I wonder if Hashicorps Vault would work here.

0

18.09.2019

Fayaz Khan

Try ansible vault. But you'd still need a way to provide the vault password securely.

0

18.09.2019

Boris Tsolin · Accepted Answer

Boris Tsolin

No, there are no security issues with the static inventory, moreover if you did everything cool and using internal networks, dont you?

0

17.09.2019

Похожие чаты

Hello guys, I have a question : I have a

3 ответов

Похожие вопросы