encryption

Archives Ansible Project
1

Hello!

Is there any way to encrypt just values in the variable files?
I need something like

2

not currently, vault only supports full file encryption (you do't need
to encrypt all your vars, just the secrets).

3

You could load in encrypted vars via a lookup to something like pass (passwordstore.org).

  • name: Debug
    debug: msg={{lookup(‘pipe’, ‘pass some/password/i/need’) }}

This way you can store your passwords as gpg-encrypted files, and even version them along with your plays.

4

Finally I make a local clone of action_plugins/include_var.py and patch it to recognise encrypted values.