A company's CI/CD pipeline must apply Ansible playbooks automatically on every code merge. Credentials must not be stored in the pipeline config. What is the best approach?
-
A
Embed SSH keys directly in the Jenkinsfile
-
B
Use Ansible Tower/AWX with machine credentials stored in its credential store
-
C
Pass passwords via pipeline environment variables in plain text
-
D
Generate a new SSH key pair for every pipeline run