Encrypt a variable with Vault

Inline-encrypt a value for use in playbook vars

ansible-vault encrypt_string 'supersecret' --name 'db_password'
tool
ansible56 commands
tags
ansiblesecurity

More ansible commands

  • Decrypt vault file
    ansible-vault view group_vars/all/vault.yml

    Display decrypted content of a vault-encrypted file

  • Copy file to remote
    ansible all -m copy -a 'src=./nginx.conf dest=/etc/nginx/nginx.conf owner=root mode=0644' -i inventory.ini

    Push a local file to all hosts with specific permissions

  • Restart service on all hosts
    ansible webservers -m service -a 'name=nginx state=restarted' -b -i inventory.ini

    Ad-hoc service restart with privilege escalation (-b)

  • Show inventory graph
    ansible-inventory -i inventory.ini --graph

    Display inventory group hierarchy as a tree

  • Test role locally with Molecule
    molecule test -s default

    Run full Molecule test suite: create, converge, verify, destroy

all 56 ansible commands