Microservices.md

Microservices

• Ansible vault
• Encrypt, decrypt base64

Ansible vault

Ansible Vault encrypts variables and files so you can protect sensitive content such as passwords or keys rather than leaving it visible as plaintext in playbooks or roles. To use Ansible Vault you need one or more passwords to encrypt and decrypt content.

Encrypting files with Ansible Vault

Manual enter password

ansible-vault create foo.yml

To create a new encrypted data file called ‘foo.yml’ with the ‘test’ vault password from ‘multi_password_file’:

ansible-vault create --vault-id test@multi_password_file foo.yml

To view encrypted file

ansible-vault view foo.yml

To edit

ansible-vault edit foo.yml

Change password

ansible-vault rekay foo.yml

Decrypting files during Playbook Runtime

Using --ask-vault-pass

sudo ansible-playbook -i ansible/inventory sample-playbook.yaml –ask-vault-pass

Using password file

sudo ansible-playbook -i ansible/inventory sample-playbook.yaml –vault-pass-file ~/secrets/vault_pass.txt

Encrypt, decrypt base64

You can encrypt and decrypt from base64 using chrome console.

Encoding to base64 is done with the btoa command

btoa("This is a test.")
> "VGhpcyBpcyBhIHRlc3Qu"

To decode a base64 encoded string, use the atob command

atob("VGhpcyBpcyBhIHRlc3Qu")
> "This is a test."