Security Automation with Ansible 2

Working with Ansible Vault

Ansible Vault is a command line utility, by default installed along with Ansible. It allows us to encrypt secrets such as keys, credentials, passwords, and so on to include in our playbooks. By doing this, we can also use these encrypted files to share with others as they contain password protection to access the encrypted data. We can use this feature to encrypt our variables, templates, and files inside our playbooks.

Ansible version 2.3 supports encrypting single variables using an Ansible single encrypted variable with the !vault  tag. We will see some examples of how we will use this in our playbooks in next section.

Read more about Ansible Vault at https://docs.ansible.com/ansible/latest/vault.html.

As this ...