Secure Secrets with Ansible Vault: Use Encrypted Files
Explore how to secure sensitive data with Ansible Vault by encrypting entire files containing variables such as passwords. Learn commands to encrypt, decrypt, view, and edit encrypted files so you can safely commit secrets to source control and verify their use in playbooks and inventories.
We'll cover the following...
There is a secret we have been using. It’s the password of the Ansible user that is stored in cleartext. Having it stored in clear text isn’t good, but having it stored within a Git repository is even worse. Luckily, Ansible has a solution.
Ansible Vault
Ansible Vault is a feature that allows you to encrypt files or strings to store sensitive data such as passwords and keys. These encrypted values are safe to store in source control. They are decrypted with the following options on the Ansible commands:
--ask-vault-pass--vault-password-file--vault-id
Using encrypted files
Ansible Vault has the ability to ...