Ansible
This repository contains my personal ansible roles and playbooks.
Nice git trick
You can use the textconv
attribute for git diff
to provide a nice display of diff
and blame
for your vault files.
In order to do that, you will need your vault password in plaintext on your computer (Don't forget to put it in your gitignore !) and put the filename in the variable vault_password_file
in your ansible.cfg
. Here, it is in the file .vault_password
.
Then, edit your local git configuration to add a new attribute in the diff
section:
[diff "ansible-vault"]
textconv = ansible-vault view
You may do that by using the following command
git config diff.ansible-vault.textconv "ansible-vault view"
Here, I use the name ansible-vault
for this new attribute, but you can of course give whatever name you like.
Then, create a file .gitattibutse
and put the following line:
*vault.yml diff=ansible-vault`
The syntax for .gitattributes
is
pattern attr1 attr2 ...
where pattern can be a regular expression. Here, it tells git that for any file of the form *vault.yml*
it should use the command specified in the ansible-vault
attribute of the diff
section to make a diff
. Namely, the command ansible-vault view
.
You may learn more about .gitattributes
on the git documentation.