mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
apply_tor_node_onion rewrote host_vars through utils.cache.yaml, whose !vault constructor returns a plain string and, depending on import order, wins over the VaultScalar constructor of utils.handler.vault. Provision calls it after generating credentials, so with svc-net-tor in the include every credential lost its tag and Ansible rendered the raw ciphertext: redis got --requirepass '$ANSIBLE_VAULT...', compose cut env values to ";1.1;AES256" and the openldap ldapsm bind failed with result 49. Write through the round-trip helpers like every other writer in the package. test_preserves_existing_vault_credentials passes again. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Inventory 📋
Build, populate, and validate Ansible inventories: device groups for invokable applications, per-app credential generation, full one-shot provisioning, and pre-deploy validation.