Vault Ids and Multiple Vault Passwords

Archives Ansible Project
1

Hi everyone,

I’m tryng to understand how multiple vault passwords work.

I found this example about providing vault-id passwords:

`
ansible-playbook --vault-id dev@dev-password --vault-id prod@prompt site.yml

`


In the example above ansible first tries the dev password and if it doesn't work it prompts for a password.  

I'd like to know if something similar to this is possible:

ansible-playbook --vault-id dev@dev-password --vault-id dev2@dev-password site.yml

(2 different passwords in the same dev-password file)

if yes, I'm not able to have/set 2 passwords with two ids in the same vaultfile.

At the moment I know:

ansible-vault encrypt_string --vault-id dev@dev-password --stdin-name 'dev_string'

but naturally  if a type:

ansible-vault encrypt_string --vault-id dev2@dev-password --stdin-name 'dev_string2'

only the password in dev-password will be used and it'll be the same of dev.

Can you tell me how to do it?

Thanks
2

At the moment I understand that I can pass multiple password files with --vault-id.

What I don’t understand is the scope of labels. As I see I can’t user different labels for the same password file. So why use them?

I’m aware that I’m missing something :slight_smile: Could you point me to the right direction?