How to use Ansible Vault

Changed how to use after version 2.5.

Ansible Version: 2.5 or later

Create a vault password file and encrypt using Openssl

# Create a plain text password file and input password
$ vi .vault_pass_org

# Encrypt a password file using OpenSSL
$ sudo openssl aes-256-cbc -salt -in .vault_pass_org -out .vault_pass
enter aes-256-cbc encryption password:
Verifying - enter aes-256-cbc encryption password:

Add option to ansible.cfg

[defaults]
vault_identity_list = files@./.vault_pass

Encrypt a variable file

$ ansible-vault encrypt secrets.yml

Ansible Version: Before 2.5

Create a vault password file

$ ansible-vault create .vault_pass

Add option to ansible.cfg

[defaults]
vault_password_file = ./.vault_pass

Encrypt a variable file

$ ansible-vault encrypt secrets.yml