generate_encrypted_password_for_Ansible.sh

#!/bin/bash

CMDNAME=`basename $0`

# if you specify vault_password_file in your ansible.cfg, just uncomment first line and comment second line:
# ANSIBLECMD="ansible-vault encrypt_string" # in ansible.cfg vault_password_file = /path/to/bullsequana_edge_password
ANSIBLECMD="ansible-vault encrypt_string --vault-id bullsequana_edge_password@prompt"

usage()
{
  echo -e "\033[32mUsage: See Options for $ANSIBLECMD\033[0m"
  echo "Example: $CMDNAME --name='name_for_my_password' 'my_secre!_p@ssw0rd' "
  echo
  echo "Following is the help for $ANSIBLECMD Options":
  $ANSIBLECMD --help
  exit -1
}

if [ $# -eq 0 ]
  then
    usage;
fi

# Write generated temporary file
$ANSIBLECMD $@ | tee /tmp/fileEncrypt$$

# Read generated temporary file
ansible_vault_password=$(cat /tmp/fileEncrypt$$)

# Check insensitive errors
result_error=$(echo "$ansible_vault_password" | grep -i 'error\|not match' )

if [ ! -z "$result_error" ]
then
  if test -f "/tmp/fileEncrypt$$"
  then
    rm -f /tmp/fileEncrypt$$
  fi  
  exit -1
fi

# Check duplicate "!vault" word 
# workaround for space character in password 
result_too_many_vaults=$(echo "$ansible_vault_password" | grep "!vault " | wc -l)

if [ ! "$result_too_many_vaults" -eq 1 ]
then
  echo -e "error in generation : \033[31m\"The password was NOT generated\"\033[0m"
  if test -f "/tmp/fileEncrypt$$"
  then
    rm -f /tmp/fileEncrypt$$
  fi  
  exit -1
fi

# Check regular expression => See https://regex101.com/
result_ansible_vault_password=$(echo "$ansible_vault_password" | grep "^.*: !vault \|[\n ]*\$ANSIBLE_VAULT;1\.2;AES256;bullsequana_edge_password([\na-fA-F0-9 ]*)*")

if [ -z "$result_ansible_vault_password" ]
then
  echo -e "error in generation : \033[31m\"The password was NOT generated\"\033[0m"
else
  # Write encrypted string in passwords.yml
  cat /tmp/fileEncrypt$$ >> ./ansible/vars/passwords.yml
  # extract variable name to help user
  name_variable=$(echo "$result_ansible_vault_password" | awk -F: '{print$1}')
  echo "you can now use your variable in your Ansible inventory"
  echo -e "edit the your hosts and modify \033[32mpassword=\"{{ $name_variable }}\" \033[0m"
fi

if test -f "/tmp/fileEncrypt$$"
then
  rm -f /tmp/fileEncrypt$$
fi