ansible - 在剧本中使用保险库

Question

您好我正在尝试使用保险库运行以下剧本，但我似乎无法让它工作。

使用以下命令创建了一个 ansible Vault 文件：

ansible-valut create group_vars/routers

在那里我有以下条目：

ansible_ssh_user: admin
ansible_ssh_pw: admin
auth_pass: admin

然后我有以下剧本：

---
- hosts:routers
  gather_facts: true
  connection: local

  tasks:
    - name: show run
      ios_command:
        authorize: yes
        auth_pass: "{{ auth_pass }}"
        commands:
          - show run
      register: config

当我尝试使用此 cli 命令运行它时

ansible-playbook -u admin script.yaml --ask-vault-pass

我每次都收到以下错误

Unable to elevate privelage to enable mode, at prompt [None] with error: timeout value 10 seconds reached while trying to send command: enable

更新

如果我将连接更改为 network_cli，现在我会收到以下错误：

fatal: [ROUTER-A]: Failed! => {"changed": false, "msg": "show run\r\n       ^\r\n% Invalid input detected at '^' marker.\r\n\rROUTER-A>"}

Answer 1

请参阅下面的最小示例。文件中要加密的文本是

    shell> cat group_vars/routers
    test: "TEST VARIABLE"

    shell> set | grep VAULT
    ANSIBLE_VAULT_PASSWORD_FILE=/home/admin/.vault_pass.txt

    shell> ls -1
    ansible.cfg
    group_vars
    hosts
    test.yml

    shell> cat ansible.cfg 
    [defaults]
    inventory = $PWD/hosts

    shell> cat hosts
    localhost
    [routers]
    localhost

    shell> ansible-vault create group_vars/routers
    shell> cat group_vars/routers 
    $ANSIBLE_VAULT;1.1;AES256
    3733 ...

    shell> cat test.yml 
    - hosts: routers
      tasks:
      - debug: var=test

    shell> ansible-playbook test.yml 
    PLAY [routers] 
    TASK [Gathering Facts] 
    ok: [localhost]
    TASK [debug] 
    ok: [localhost] => {
    "test": "TEST VARIABLE"
    }
    PLAY RECAP 
    localhost: ok=2    changed=0    unreachable=0    failed=0