Ansible 2 cheatsheet

Ansible 2: Vault (secrets)

5 common Ansible 2 tasks.

Create an encrypted file

Create a new file that is encrypted at rest. You are asked for a vault password.

ansible-vault create secrets.yml

Decrypt, edit and re-encrypt a file.

ansible-vault edit secrets.yml

Encrypt an existing file in place.

ansible-vault encrypt vars/prod.yml

Print the decrypted contents without changing the file.

ansible-vault view secrets.yml

Prompt for the vault password when the playbook runs.

ansible-playbook site.yml --ask-vault-pass