ansible-vault

https://docs.ansible.com/ansible/latest/user_guide/vault.html

Support for saving encrypted information (passwords, API Keys ...) in playbooks using Ansible Vault (ansible-vault) since 2014

Encrypt file:

• ansible-vault encrypt passwords.yml

• ansible-vault --help
• ansible-vault --version

• ansible-vault [create|decrypt|edit|encrypt|rekey|view] [--help] [options] file_name

Commands

• ansible-vault create
• ansible-vault encrypt YOUR_FILE
• ansible-vault encrypt_string
• ansible-vault decrypt YOUR_FILE
• ansible-vault view YOUR_FILE
• ansible-playbook --vault-id @prompt create-users.yml

Activities

1. Learn about ansible-vault common uses cases

Related terms

• openssl enc
• --ask-vault-pass or --ask-vault-password
• --vault-password-file
• vars_files:
• vault ID: --vault-id
• sops
• password:

See also

• ansible-vault [ create | encrypt | decrypt | view | encrypt_string ], ansible-vault --version, ansible-vault --help
• Secrets: Kubernetes secrets, ansible-vault, Hashicorp Vault, AWS Secrets Manager, Google Secret Manager, git-crypt, SOPS: Secrets OPerationS, Google Cloud Secret Manager, GitHub secret scanning alerts, Sealed-secrets, Kubernetes Secrets Store CSI Driver
• vault [ secrets enable | kv put | kv get | server | operator | auth | token | secrets | auth enable | status ] Vault Changelog, vault help, config.hcl

https://docs.ansible.com/ansible/latest/user_guide/vault.html

https://docs.ansible.com/ansible/latest/user_guide/vault.html

http://manpages.org/ansible-vault