Using the Ansible-vault

The following table lists all the subcommands that the Ansible-vault utility comes with:

Subcommand

Description

create

This creates a encrypted file from scratch using the editor. This needs the editor environment variable set before launching the command.

edit

This edits the existing encrypted file with an editor, without decrypting the contents.

encrypt

This encrypts an existing file with structured data.

decrypt

This decrypts the file. Use this with care and do not commit the decrypted file to version control.

rekey

This changes the key or password used to encrypt or decrypt.

Encrypting the data

Let's perform some operations using Ansible-vault. We will start by creating an encrypted file. To create ...

Get Ansible Playbook Essentials now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.