ansible-vault doesn't prompt to create vault password

Archives Ansible Project
1

I’m running 2.4.0 and trying to encrypt a file with ansible-vault. In past versions of Ansible, this command would prompt to create a vault password to encrypt the file:

C02NVAEGG3QJ:playbooks mullenma$ ansible-vault encrypt test.yml
Usage: ansible-vault encrypt [options] file_name

encryption/decryption utility for Ansible data files

Options:
–ask-vault-pass ask for vault password
-h, --help show this help message and exit
–new-vault-id=NEW_VAULT_ID
the new vault identity to use for rekey
–new-vault-password-file=NEW_VAULT_PASSWORD_FILES
new vault password file for rekey
–output=OUTPUT_FILE output file name for encrypt or decrypt; use - for
stdout
–vault-id=VAULT_IDS the vault identity to use
–vault-password-file=VAULT_PASSWORD_FILES
vault password file
-v, --verbose verbose mode (-vvv for more, -vvvv to enable
connection debugging)
–version show program’s version number and exit

See ‘ansible-vault --help’ for more information on a specific
command.
ERROR! A vault password is required to use Ansible’s Vault

I also tried to utilize the create keyword, with similar results:

C02NVAEGG3QJ:playbooks mullenma$ ansible-vault create test.yml
Usage: ansible-vault create [options] file_name

encryption/decryption utility for Ansible data files

Options:
–ask-vault-pass ask for vault password
-h, --help show this help message and exit
–new-vault-id=NEW_VAULT_ID
the new vault identity to use for rekey
–new-vault-password-file=NEW_VAULT_PASSWORD_FILES
new vault password file for rekey
–output=OUTPUT_FILE output file name for encrypt or decrypt; use - for
stdout
–vault-id=VAULT_IDS the vault identity to use
–vault-password-file=VAULT_PASSWORD_FILES
vault password file
-v, --verbose verbose mode (-vvv for more, -vvvv to enable
connection debugging)
–version show program’s version number and exit

See ‘ansible-vault --help’ for more information on a specific
command.
ERROR! A vault password is required to use Ansible’s Vault

Is there something I am missing, or is this not working correctly?

Thanks,
Matt

2

hmm, thats a bug. I’ll take a look at it, but filing at issue at github wouldn’t hurt.

3

And for now, in 2.4:

ansible-vault --ask-vault-pass create foo.yml

or

ansible-vault --vault-id=prompt create foo.yml

4

That works, thanks!

For anyone else hitting this, it was an already open issue: https://github.com/ansible/ansible/issues/27885

5

And fixed in devel/ in https://github.com/ansible/ansible/pull/28185