Working with ansible-vault
I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a
vars file, reference that
vars file from your
task, and encrypt the whole
vars file using
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.