dotfiles/config/ansible

Ansible Configuration

1Password Integration

This Ansible configuration includes a custom lookup plugin for fetching secrets from 1Password. The 1Password CLI must be installed and authenticated on the machine running Ansible.

Usage

# Simple password lookup
password: "{{ lookup('onepassword', 'item-name') }}"

# Fetch specific field
api_key: "{{ lookup('onepassword', 'item-name', field='api_key') }}"

# Fetch from specific vault (using vault ID)
database_password: "{{ lookup('onepassword', 'database', field='password', vault='j7nmhqlsjmp2r6umly5t75hzb4') }}"

# Fetch a field without revealing it (for non-password fields)
note: "{{ lookup('onepassword', 'item-name', field='notes', reveal=false) }}"

Prerequisites

1. Install 1Password CLI
2. Sign in to 1Password using op signin
3. Service account should be properly configured

Finding Vault IDs

To find your vault ID:

op vault list

For more information, see the 1Password CLI documentation.