Encrypt variable with Vault ansible
Inline-encrypt a single string value for use in vars
ansible-vault encrypt_string 'mysecretpassword' --name 'db_password'
more ansible
all 56 commands →
Limit to specific hosts
ansible-playbook deploy.yml -i inventory.ini --limit 'web01,web02'
Step through tasks interactively
ansible-playbook site.yml -i inventory.ini --step
Rekey vault file
ansible-vault rekey vault.yml --new-vault-password-file new_pass.txt
Multiple vault IDs with prompt
ansible-playbook site.yml --vault-id dev@dev_pass.txt --vault-id prod@prompt
Edit vault in place
EDITOR=vim ansible-vault edit group_vars/prod/secrets.yml --vault-password-file ~/.vault_pass