Ansible中变量与机密

1.使用项目清单文件里面配置控制主机的ip和密码执行ping命令

[root@ansible jay]# vi inventory 

192.168.10.129 ansible_password=123456

[root@ansible jay]# ansible 192.168.10.129 -i inventory -m ping
192.168.10.129 | SUCCESS => {
   
    "ansible_facts": {
   
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
                                                                                                                                                        

2.将清单文件中的密码配置删除，在host_vars中ping通受控主机

[root@ansible jay]# cd host_vas/
[root@ansible host_vas]# vi 192.168.10.129
ansible_password=123456

[root@ansible jay]# ansible 192.168.10.129 -m ping
192.168.10.129 | SUCCESS => {
   
    "ansible_facts": {
   
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}

3.将清单文件与主机变量host_vars中的密码配置删除，用-e覆盖变量

[root@ansible host_vas]# rm -f 192.168.10.129 
[root@ansible host_vas]# ansible all -e ansible_password=123456 -m ping
192.168.10.129 | SUCCESS => {
   
    "ansible_facts": {
   
        "discovered_interpreter_python": "/usr/libexec/platform-python"