Removed Jinja2 variable usage attempts from ansible configuration
This commit is contained in:
		
							
								
								
									
										60
									
								
								ansible.cfg
									
									
									
									
									
								
							
							
						
						
									
										60
									
								
								ansible.cfg
									
									
									
									
									
								
							@@ -32,13 +32,13 @@ home=.ansible
 | 
			
		||||
;become_password_file=
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Become Plugins.
 | 
			
		||||
become_plugins={{ "plugins/become:.ansible/plugins/become:" ~ ANSIBLE_HOME ~ "/plugins/become:/usr/share/ansible/plugins/become" }}
 | 
			
		||||
become_plugins=plugins/become:.ansible/plugins/become:/usr/share/ansible/plugins/become
 | 
			
		||||
 | 
			
		||||
# (string) Chooses which cache plugin to use, the default 'memory' is ephemeral.
 | 
			
		||||
;fact_caching=memory
 | 
			
		||||
fact_caching=yaml
 | 
			
		||||
 | 
			
		||||
# (string) Defines connection or path information for the cache plugin
 | 
			
		||||
;fact_caching_connection=
 | 
			
		||||
fact_caching_connection=.ansible/facts
 | 
			
		||||
 | 
			
		||||
# (string) Prefix to use for cache plugin files/tables
 | 
			
		||||
;fact_caching_prefix=ansible_facts
 | 
			
		||||
@@ -54,7 +54,7 @@ become_plugins={{ "plugins/become:.ansible/plugins/become:" ~ ANSIBLE_HOME ~ "/p
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for collections content. Collections must be in nested *subdirectories*, not directly in these directories. For example, if ``COLLECTIONS_PATHS`` includes ``'{{ ANSIBLE_HOME ~ "/collections" }}'``, and you want to add ``my.collection`` to that directory, it must be saved as ``'{{ ANSIBLE_HOME} ~ "/collections/ansible_collections/my/collection" }}'``.
 | 
			
		||||
 | 
			
		||||
collections_path={{ ".ansible/collections:" ~ ANSIBLE_HOME ~ "/collections:/usr/share/ansible/collections" }}
 | 
			
		||||
collections_path=collections:.ansible/collections:/usr/share/ansible/collections
 | 
			
		||||
 | 
			
		||||
# (boolean) A boolean to enable or disable scanning the sys.path for installed collections
 | 
			
		||||
;collections_scan_sys_path=True
 | 
			
		||||
@@ -63,7 +63,7 @@ collections_path={{ ".ansible/collections:" ~ ANSIBLE_HOME ~ "/collections:/usr/
 | 
			
		||||
;connection_password_file=
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Action Plugins.
 | 
			
		||||
action_plugins={{ "plugins/action:.ansible/plugins/action:" ~ ANSIBLE_HOME ~ "/plugins/action:/usr/share/ansible/plugins/action" }}
 | 
			
		||||
action_plugins=plugins/action:.ansible/plugins/action:/usr/share/ansible/plugins/action
 | 
			
		||||
 | 
			
		||||
# (boolean) When enabled, this option allows lookup plugins (whether used in variables as ``{{lookup('foo')}}`` or as a loop as with_foo) to return data that is not marked 'unsafe'.
 | 
			
		||||
# By default, such data is marked as unsafe to prevent the templating engine from evaluating any jinja2 templating language, as this could represent a security risk. This option is provided to allow for backward compatibility, however users should first consider adding allow_unsafe=True to any lookups which may be expected to contain data which may be run through the templating engine late
 | 
			
		||||
@@ -76,16 +76,16 @@ action_plugins={{ "plugins/action:.ansible/plugins/action:" ~ ANSIBLE_HOME ~ "/p
 | 
			
		||||
;ask_vault_pass=False
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Cache Plugins.
 | 
			
		||||
cache_plugins={{ "plugins/cache:.ansible/plugins/cache:" ~ ANSIBLE_HOME ~ "/plugins/cache:/usr/share/ansible/plugins/cache" }}
 | 
			
		||||
cache_plugins=plugins/cache:.ansible/plugins/cache:/usr/share/ansible/plugins/cache
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Callback Plugins.
 | 
			
		||||
callback_plugins={{"plugins/callback:.ansible/plugins/callback:" ~ ANSIBLE_HOME ~ "/plugins/callback:/usr/share/ansible/plugins/callback" }}
 | 
			
		||||
callback_plugins=plugins/callback:.ansible/plugins/callback:/usr/share/ansible/plugins/callback
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Cliconf Plugins.
 | 
			
		||||
cliconf_plugins={{ "plugins/cliconf:.ansible/plugins/cliconf:" ~ ANSIBLE_HOME ~ "/plugins/cliconf:/usr/share/ansible/plugins/cliconf" }}
 | 
			
		||||
cliconf_plugins=plugins/cliconf:.ansible/plugins/cliconf:/usr/share/ansible/plugins/cliconf
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Connection Plugins.
 | 
			
		||||
connection_plugins={{ "plugins/connection:.ansible/plugins/connection:" ~ ANSIBLE_HOME ~ "/plugins/connection:/usr/share/ansible/plugins/connection" }}
 | 
			
		||||
connection_plugins=plugins/connection:.ansible/plugins/connection:/usr/share/ansible/plugins/connection
 | 
			
		||||
 | 
			
		||||
# (boolean) Toggles debug output in Ansible. This is *very* verbose and can hinder multiprocessing.  Debug output can also include secret information despite no_log settings being enabled, which means debug mode should not be used in production.
 | 
			
		||||
# @TODO turn the below off in prod
 | 
			
		||||
@@ -101,7 +101,7 @@ debug=True
 | 
			
		||||
fact_path=facts.d
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Jinja2 Filter Plugins.
 | 
			
		||||
filter_plugins={{ "plugins/filter:.ansible/plugins/filter:" ~ ANSIBLE_HOME ~ "/plugins/filter:/usr/share/ansible/plugins/filter" }}
 | 
			
		||||
filter_plugins=plugins/filter:.ansible/plugins/filter:/usr/share/ansible/plugins/filter
 | 
			
		||||
 | 
			
		||||
# (boolean) This option controls if notified handlers run on a host even if a failure occurs on that host.
 | 
			
		||||
# When false, the handlers will not run if a failure has occurred on a host.
 | 
			
		||||
@@ -135,17 +135,17 @@ gathering=smart
 | 
			
		||||
;hash_behaviour=replace
 | 
			
		||||
 | 
			
		||||
# (pathlist) Comma separated list of Ansible inventory sources
 | 
			
		||||
inventory=hosts.ini
 | 
			
		||||
inventory=hosts.ini,hosts4.ini,hosts6.ini,hosts.yml,hosts4.yml,hosts6.yml,hosts.yaml,hosts4.yaml,hosts6.yaml
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for HttpApi Plugins.
 | 
			
		||||
httpapi_plugins={{ "plugins/httpapi:.ansible/httpapi:" ~ ANSIBLE_HOME ~ "/plugins/httpapi:/usr/share/ansible/plugins/httpapi" }}
 | 
			
		||||
httpapi_plugins=plugins/httpapi:.ansible/httpapi:/usr/share/ansible/plugins/httpapi
 | 
			
		||||
 | 
			
		||||
# (float) This sets the interval (in seconds) of Ansible internal processes polling each other. Lower values improve performance with large playbooks at the expense of extra CPU load. Higher values are more suitable for Ansible usage in automation scenarios, when UI responsiveness is not required but CPU usage might be a concern.
 | 
			
		||||
# The default corresponds to the value hardcoded in Ansible <= 2.1
 | 
			
		||||
;internal_poll_interval=0.001
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Inventory Plugins.
 | 
			
		||||
inventory_plugins={{ "plugins/inventory:.ansible/inventory:" ~ ANSIBLE_HOME ~ "/plugins/inventory:/usr/share/ansible/plugins/inventory" }}
 | 
			
		||||
inventory_plugins=plugins/inventory:.ansible/inventory:/usr/share/ansible/plugins/inventory
 | 
			
		||||
 | 
			
		||||
# (string) This is a developer-specific feature that allows enabling additional Jinja2 extensions.
 | 
			
		||||
# See the Jinja2 documentation for details. If you do not know what these do, you probably don't need to change this setting :)
 | 
			
		||||
@@ -162,16 +162,17 @@ inventory_plugins={{ "plugins/inventory:.ansible/inventory:" ~ ANSIBLE_HOME ~ "/
 | 
			
		||||
;bin_ansible_callbacks=False
 | 
			
		||||
 | 
			
		||||
# (tmppath) Temporary directory for Ansible to use on the controller.
 | 
			
		||||
local_tmp={{ ANSIBLE_HOME ~ "/.tmp" }}
 | 
			
		||||
;local_tmp={{ ANSIBLE_HOME ~ "/.tmp" }}
 | 
			
		||||
local_tmp=.tmp
 | 
			
		||||
 | 
			
		||||
# (list) List of logger names to filter out of the log file
 | 
			
		||||
;log_filter=
 | 
			
		||||
 | 
			
		||||
# (path) File to which Ansible will log on the controller. When empty logging is disabled.
 | 
			
		||||
;log_path=
 | 
			
		||||
log_path=.ansible/log.txt
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Lookup Plugins.
 | 
			
		||||
lookup_plugins={{ "plugins/lookup:.ansible/lookup:" ~ ANSIBLE_HOME ~ "/plugins/lookup:/usr/share/ansible/plugins/lookup" }}
 | 
			
		||||
lookup_plugins=plugins/lookup:.ansible/lookup:/usr/share/ansible/plugins/lookup
 | 
			
		||||
 | 
			
		||||
# (string) Sets the macro for the 'ansible_managed' variable available for :ref:`ansible_collections.ansible.builtin.template_module` and :ref:`ansible_collections.ansible.windows.win_template_module`.  This is only relevant for those two modules.
 | 
			
		||||
;ansible_managed=Ansible managed
 | 
			
		||||
@@ -186,13 +187,13 @@ lookup_plugins={{ "plugins/lookup:.ansible/lookup:" ~ ANSIBLE_HOME ~ "/plugins/l
 | 
			
		||||
;module_name=command
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Modules.
 | 
			
		||||
library={{ "plugins/modules:.ansible/modules:" ~ ANSIBLE_HOME ~ "/plugins/modules:/usr/share/ansible/plugins/modules" }}
 | 
			
		||||
library=plugins/modules:.ansible/modules:/usr/share/ansible/plugins/modules
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Module utils files, which are shared by modules.
 | 
			
		||||
module_utils={{ "plugins/module_utils:.ansible/module_utils:" ~ ANSIBLE_HOME ~ "/plugins/module_utils:/usr/share/ansible/plugins/module_utils" }}
 | 
			
		||||
module_utils=plugins/module_utils:.ansible/module_utils:/usr/share/ansible/plugins/module_utils
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Netconf Plugins.
 | 
			
		||||
netconf_plugins={{ "plugins/netconf:.ansible/netconf:" ~ ANSIBLE_HOME ~ "/plugins/netconf:/usr/share/ansible/plugins/netconf" }}
 | 
			
		||||
netconf_plugins=plugins/netconf:.ansible/netconf:/usr/share/ansible/plugins/netconf
 | 
			
		||||
 | 
			
		||||
# (boolean) Toggle Ansible's display and logging of task details, mainly used to avoid security disclosures.
 | 
			
		||||
;no_log=False
 | 
			
		||||
@@ -222,7 +223,7 @@ netconf_plugins={{ "plugins/netconf:.ansible/netconf:" ~ ANSIBLE_HOME ~ "/plugin
 | 
			
		||||
;remote_user=
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Roles.
 | 
			
		||||
roles_path={{ ".ansible/roles:" ~ ANSIBLE_HOME ~ "/roles:/usr/share/ansible/roles:/etc/ansible/roles" }}
 | 
			
		||||
roles_path=roles:.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
 | 
			
		||||
 | 
			
		||||
# (string) Set the main callback used to display Ansible output. You can only have one at a time.
 | 
			
		||||
# You can have many other callbacks, but just one can be in charge of stdout.
 | 
			
		||||
@@ -233,7 +234,7 @@ roles_path={{ ".ansible/roles:" ~ ANSIBLE_HOME ~ "/roles:/usr/share/ansible/role
 | 
			
		||||
;strategy=linear
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Strategy Plugins.
 | 
			
		||||
strategy_plugins={{ "plugins/strategy:.ansible/plugins/strategy:" ~ ANSIBLE_HOME ~ "/plugins/strategy:/usr/share/ansible/plugins/strategy" }}
 | 
			
		||||
strategy_plugins=plugins/strategy:.ansible/plugins/strategy:/usr/share/ansible/plugins/strategy
 | 
			
		||||
 | 
			
		||||
# (boolean) Toggle the use of "su" for tasks.
 | 
			
		||||
;su=False
 | 
			
		||||
@@ -242,10 +243,10 @@ strategy_plugins={{ "plugins/strategy:.ansible/plugins/strategy:" ~ ANSIBLE_HOME
 | 
			
		||||
;syslog_facility=LOG_USER
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Terminal Plugins.
 | 
			
		||||
terminal_plugins={{ "plugins/terminal:.ansible/plugins/terminal:" ~ ANSIBLE_HOME ~ "/plugins/terminal:/usr/share/ansible/plugins/terminal" }}
 | 
			
		||||
terminal_plugins=plugins/terminal:.ansible/plugins/terminal:/usr/share/ansible/plugins/terminal
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Jinja2 Test Plugins.
 | 
			
		||||
test_plugins={{ "plugins/test:.ansible/plugins/test:" ~ ANSIBLE_HOME ~ "/plugins/test:/usr/share/ansible/plugins/test" }}
 | 
			
		||||
test_plugins=plugins/test:.ansible/plugins/test:/usr/share/ansible/plugins/test
 | 
			
		||||
 | 
			
		||||
# (integer) This is the default timeout for connection plugins to use.
 | 
			
		||||
;timeout=10
 | 
			
		||||
@@ -259,7 +260,7 @@ test_plugins={{ "plugins/test:.ansible/plugins/test:" ~ ANSIBLE_HOME ~ "/plugins
 | 
			
		||||
;error_on_undefined_vars=True
 | 
			
		||||
 | 
			
		||||
# (pathspec) Colon separated paths in which Ansible will search for Vars Plugins.
 | 
			
		||||
vars_plugins={{ ".ansible/plugins/vars:" ~ ANSIBLE_HOME ~ "/plugins/vars:/usr/share/ansible/plugins/vars" }}
 | 
			
		||||
vars_plugins=plugins/vars:.ansible/plugins/vars:/usr/share/ansible/plugins/vars
 | 
			
		||||
 | 
			
		||||
# (string) The vault_id to use for encrypting by default. If multiple vault_ids are provided, this specifies which to use for encryption. The --encrypt-vault-id cli option overrides the configured value.
 | 
			
		||||
;vault_encrypt_identity=
 | 
			
		||||
@@ -356,7 +357,7 @@ host_key_checking=False
 | 
			
		||||
;old_plugin_cache_clear=False
 | 
			
		||||
 | 
			
		||||
# (path) A number of non-playbook CLIs have a ``--playbook-dir`` argument; this sets the default value for it.
 | 
			
		||||
playbook_dir=.
 | 
			
		||||
playbook_dir=playbooks
 | 
			
		||||
 | 
			
		||||
# (string) This sets which playbook dirs will be used as a root to process vars plugins, which includes finding host_vars/group_vars
 | 
			
		||||
;playbook_vars_root=top
 | 
			
		||||
@@ -426,7 +427,7 @@ vars_plugins_enabled=host_group_vars
 | 
			
		||||
 | 
			
		||||
# (list) Check all of these extensions when looking for 'variable' files which should be YAML or JSON or vaulted versions of these.
 | 
			
		||||
# This affects vars_files, include_vars, inventory and vars plugins among others.
 | 
			
		||||
yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
yaml_valid_extensions=.yml,.yaml
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
[privilege_escalation]
 | 
			
		||||
@@ -480,7 +481,7 @@ yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
# It can result in a very significant performance improvement when enabled.
 | 
			
		||||
# However this conflicts with privilege escalation (become). For example, when using 'sudo:' operations you must first disable 'requiretty' in /etc/sudoers on all managed hosts, which is why it is disabled by default.
 | 
			
		||||
# This setting will be disabled if ``ANSIBLE_KEEP_REMOTE_FILES`` is enabled.
 | 
			
		||||
;pipelining=False
 | 
			
		||||
pipelining=True
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
[colors]
 | 
			
		||||
@@ -549,6 +550,7 @@ yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
# This is only used by the ``ansible-galaxy collection install`` and ``download`` commands.
 | 
			
		||||
# Cache files inside this dir will be ignored if they are world writable.
 | 
			
		||||
;cache_dir={{ ANSIBLE_HOME ~ "/galaxy_cache" }}
 | 
			
		||||
cache_dir=.galaxy_cache
 | 
			
		||||
 | 
			
		||||
# (bool) whether ``ansible-galaxy collection install`` should warn about ``--collections-path`` missing from configured :ref:`collections_paths`
 | 
			
		||||
;collections_path_warning=True
 | 
			
		||||
@@ -568,7 +570,7 @@ yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
;display_progress=
 | 
			
		||||
 | 
			
		||||
# (path) Configure the keyring used for GPG signature verification during collection installation and verification.
 | 
			
		||||
;gpg_keyring=
 | 
			
		||||
gpg_keyring=$HOME/.gnupg
 | 
			
		||||
 | 
			
		||||
# (boolean) If set to yes, ansible-galaxy will not validate TLS certificates. This can be useful for testing against a server with a self-signed certificate.
 | 
			
		||||
;ignore_certs=
 | 
			
		||||
@@ -603,6 +605,7 @@ yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
 | 
			
		||||
# (path) Local path to galaxy access token file
 | 
			
		||||
;token_path={{ ANSIBLE_HOME ~ "/galaxy_token" }}
 | 
			
		||||
token_path=galaxy_token
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
[inventory]
 | 
			
		||||
@@ -645,6 +648,7 @@ yaml_valid_extensions=.yml, .yaml, .json
 | 
			
		||||
 | 
			
		||||
# (list) List of enabled inventory plugins, it also determines the order in which they are used.
 | 
			
		||||
;enable_plugins=host_list, script, auto, yaml, ini, toml
 | 
			
		||||
enable_plugins=yaml,ini,host_list,script,auto
 | 
			
		||||
 | 
			
		||||
# (bool) Controls if ansible-inventory will accurately reflect Ansible's view into inventory or its optimized for exporting.
 | 
			
		||||
;export=False
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user