mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
![]() * Fix vault --ask-vault-pass with no tty 2.4.0 added a check for isatty() that would skip setting up interactive vault password prompts if not running on a tty. But... getpass.getpass() will fallback to reading from stdin if it gets that far without a tty. Since 2.4.0 skipped the interactive prompts / getpass.getpass() in that case, it would never get a chance to fall back to stdin. So if 'echo $VAULT_PASSWORD| ansible-playbook --ask-vault-pass site.yml' was ran without a tty (ie, from a jenkins job or via the vagrant ansible provisioner) the 2.4 behavior was different than 2.3. 2.4 would never read the password from stdin, resulting in a vault password error like: ERROR! Attempting to decrypt but no vault secrets found Fix is just to always call the interactive password prompts based on getpass.getpass() on --ask-vault-pass or --vault-id @prompt and let getpass sort it out. * up test_prompt_no_tty to expect prompt with no tty We do call the PromptSecret class if there is no tty, but we are back to expecting it to read from stdin in that case. * Fix logic for when to auto-prompt vault pass If --ask-vault-pass is used, then pretty much always prompt. If it is not used, then prompt if there are no other vault ids provided and 'auto_prompt==True'. Fixes vagrant bug https://github.com/hashicorp/vagrant/issues/9033 Fixes #30993 |
7 years ago | |
---|---|---|
.. | ||
invalid_format | 7 years ago | |
roles | 7 years ago | |
aliases | 8 years ago | |
empty-password | 7 years ago | |
encrypted_file_encrypted_var_password | 7 years ago | |
example1_password | 7 years ago | |
example2_password | 7 years ago | |
example3_password | 7 years ago | |
faux-editor.py | 7 years ago | |
format_1_0_AES.yml | 7 years ago | |
format_1_1_AES.yml | 7 years ago | |
format_1_1_AES256.yml | 7 years ago | |
format_1_2_AES256.yml | 7 years ago | |
password-script.py | 7 years ago | |
runme.sh | 7 years ago | |
runme_change_pip_installed.sh | 7 years ago | |
test-vault-client.py | 7 years ago | |
test_vault.yml | 8 years ago | |
test_vault_embedded.yml | 8 years ago | |
test_vault_embedded_ids.yml | 7 years ago | |
test_vault_file_encrypted_embedded.yml | 7 years ago | |
test_vaulted_inventory.yml | 8 years ago | |
test_vaulted_template.yml | 7 years ago | |
vault-password | 8 years ago | |
vault-password-ansible | 7 years ago | |
vault-password-wrong | 7 years ago | |
vault-secret.txt | 8 years ago | |
vaulted.inventory | 8 years ago |