Edit vault in place ansible
Decrypt, edit in $EDITOR, re-encrypt atomically — never writes plaintext to disk
EDITOR=vim ansible-vault edit group_vars/prod/secrets.yml --vault-password-file ~/.vault_pass
more ansible
all 56 commands →
Dynamic inventory graph
ansible-inventory -i aws_ec2.yml --graph --vars
Inventory as YAML
ansible-inventory -i aws_ec2.yml --list --yaml > resolved_inventory.yml
Constructed keyed_groups
plugin: constructed
keyed_groups:
- key: tags.Role
prefix: role
- key: placement.region
prefix: region
Molecule scaffold role
molecule init role my_role --driver-name docker && cd my_role && MOLECULE_DISTRO=ubuntu2204 molecule create
Molecule converge then verify
molecule converge && molecule verify