Ansible-vault

Support for saving encrypted information (passwords, API Keys ...) in playbooks using Ansible Vault (ansible-vault) since 2014

ansible-vault encrypt passwords.yml

ansible-vault [create|decrypt|edit|encrypt|rekey] [--help] [options] file_name

Commands

• ansible-vault encrypt YOUR_FILE
• ansible-vault decrypt YOUR_FILE
• ansible-vault view YOUR_FILE
• ansible-playbook --vault-id @prompt create-users.yml

Activities

1. Learn about ansible-vault common uses cases

Related terms

• openssl enc
• --ask-vault-pass
• --vault-password-file
• vars_files:

See also

• Ansible: Ansible modules, Playbooks (examples) ansible-playbook, ansible-vault, ansible-inventory, Ansible Tower, Ansible Galaxy (Roles) (ansible-galaxy), ansible-cmdb, gather facts, changelog, ansible.cfg, Ansible Molecule, Ansible collections, register, template, --ask-pass, --ask-become-pass, remote_user:, /etc/ansible/hosts, ansible-doc
• HTTP, HTTP/2, HTTP/3, HTTPS, CSR, TLS, SSL, HSTS, openSSL, WebSockets, WebRTC, ssl_certificate QUIC
• secrets: Kubernetes secrets, ansible-vault, Hashicorp Vault
• Vault, Vault Changelog, vault secrets enable, vault kv put, vault kv get

https://docs.ansible.com/ansible/latest/user_guide/vault.html

https://docs.ansible.com/ansible/latest/user_guide/vault.html

http://manpages.org/ansible-vault