/docs/MyDocs

Vault

=====

 The vault feature can encrypt any structured data file used by Ansible. This can include 

    - “group_vars/” or “host_vars/” inventory variables,

    - variables loaded by “include_vars” or “vars_files”

    - variable files passed on the ansible-playbook command line with “-e @file.yml” or “-e @file.json”. 

    

 Create encrypted/modify file:                                          - the password should be the same for all files you want to use together\

    ansible-vault encrypt <list-of-yml-files>                           - encrypt specified files

        rekey <list-of-encyrpted-files>                                 - change password

        create enc.yml                                                  - creates empty encrypted file

        edit enc.yml                                                    - edit data in encrypted file

        view enc.yml                                                    - view

    

 Using encrypted files:                                                 - Link encrypted files as usual, but instruct ansible to ask for password and decrypt them

    ansible-playbook --ask-vault-pass .... <playlist>                   - ask passwords and automatically decrypts encrypted files

    ansible-playbook --vault-password-file ~/.vault_pass.txt ...        - reads the password from the speicifed file