skylab/skylab-ansible
Archived
2
0
Fork 0
Code Pull Requests Releases Activity

Add optional support for passing datastore encryption key from caller

Browse Source
This commit is contained in:
Ethan Paul 2021-11-10 23:54:25 -05:00
parent 674d432773
commit 4275a0bc23
No known key found for this signature in database
GPG Key ID: 6A337337DF6B5B1A
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
roles/datastore/tasks/mounts.yaml
View File

@ -60,6 +60,7 @@
block: block:
- name: Prompt for decryption key - name: Prompt for decryption key
no_log: true no_log: true
when: skylab_datastore_encryption_password is not defined
ansible.builtin.pause: ansible.builtin.pause:
prompt: >- prompt: >-
Datastore device {{ inventory_hostname }}:/dev/{{ skylab_datastore_device }} is not Datastore device {{ inventory_hostname }}:/dev/{{ skylab_datastore_device }} is not
@ -73,7 +74,7 @@
device: /dev/{{ skylab_datastore_device }} device: /dev/{{ skylab_datastore_device }}
state: opened state: opened
name: brick name: brick
passphrase: "{{ _luks_decryption_key.user_input }}" passphrase: "{{ _luks_decryption_key.user_input | default(skylab_datastore_encryption_password) }}"
- name: Fetch updated block device information - name: Fetch updated block device information
ansible.builtin.command: ansible.builtin.command: