Encrypt a File with ansible-vault create
Protect a secrets file end to end.
Secrets in Plain YAML?
Playbooks live in Git, so a database password sitting in plain vars is a leak waiting to happen. You need encryption at rest. 🔒
Meet Ansible Vault
Ansible Vault encrypts files and variables so secrets can be committed safely. Ansible decrypts them only at run time.
All lessons in this course
- Encrypt a File with ansible-vault create
- Edit, View & Rekey Vault Files
- Encrypt a Single Variable Inline
- Decrypt at Runtime with --ask-vault-pass