ansible-vault

Support for saving encrypted information (passwords, API Keys ...) in playbooks using Ansible Vault (ansible-vault) since 2014

Encrypt file:

• ansible-vault encrypt passwords.yml

• ansible-vault --help
• ansible-vault --version

• ansible-vault [create|decrypt|edit|encrypt|rekey] [--help] [options] file_name

Commands

• ansible-vault create
• ansible-vault encrypt YOUR_FILE
• ansible-vault decrypt YOUR_FILE
• ansible-vault view YOUR_FILE
• ansible-playbook --vault-id @prompt create-users.yml

Activities

1. Learn about ansible-vault common uses cases

Related terms

• openssl enc
• --ask-vault-pass
• --vault-password-file
• vars_files:

See also

• ansible-vault [ create | encrypt | decrypt | view | encrypt_string ], ansible-vault --version, ansible-vault --help
• Secrets: Kubernetes secrets, ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager, git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager, GitHub secret scanning alerts
• vault [ secrets enable | kv put | kv get | server | operator | auth | token | secrets | auth enable | status ] Vault Changelog, vault help

https://docs.ansible.com/ansible/latest/user_guide/vault.html

https://docs.ansible.com/ansible/latest/user_guide/vault.html

http://manpages.org/ansible-vault