Files

T

ci / validate (push) Failing after 1m8s

Details

Initial CV-aligned infrastructure portfolio

Rework portfolio around Linux operations, Zabbix monitoring, migration validation, and ELK/Grafana log observability.

Add AAP-style LVM resize workflow, Zabbix server/proxy/agent automation assets, Linux/AIX monitoring templates, and updated validation CI.

2026-05-04 17:37:24 +00:00

1.1 KiB

Raw Blame History

Vault Configuration Guide

Overview

The current portfolio demo does not require Ansible Vault for make test or make demo. Secrets are intentionally kept out of the main validation path so reviewers can run the project offline.

Use Vault only when extending the simulator to manage real hosts or credentials.

Recommended Pattern

Start from the example file:

cp group_vars/vault.example.yml group_vars/vault.yml

Replace placeholder values locally.
Encrypt the file before using it with real systems:

ansible-vault encrypt group_vars/vault.yml

Do not commit real secret values. Keep group_vars/vault.example.yml as the committed reference.

Running With Vault

ansible-playbook -i inventory/hosts.ini playbooks/provision.yml --ask-vault-pass

or:

ansible-playbook -i inventory/hosts.ini playbooks/provision.yml --vault-password-file ~/.vault_pass.txt

Notes

The delivered playbooks do not import a vault file by default.
Add vars_files only in an environment-specific branch or private overlay.
Prefer a secret manager or automation controller for production use.

1.1 KiB Raw Blame History