Feature Request: Support for Ansible-Vault

[zkanda]

[dblockow]

Agree, support for vault would be fantastic: http://docs.ansible.com/ansible/playbooks_vault.html

[vermut]

Well, how do you imagine typical workflow? Automatic decoding? Or option to preview encoded data?

[zkanda]

I can imagine two workflow

• Creating and editing encrypted data
• Editing existing encrypted data
• Maybe Optional Storing of password? Not sure if this is a good practice, but ansible-vault can accept parameterized --vault-password-file=PASSWORD_FILE. Which you need to store in a file anyway.

[lhoss]

+1 (with ideas from Zkanda) And allow to define a (default) vault-password-file, which would be used to (on-the-fly) encrypt/decrypt all vault managed(/encrypted) files

[foozmeat]

+1

[beneshed]

+1

[voorth]

+1

[zedekiah]

+1

[jeffgrant]

+1

[jamesmmchugh]

+1

[redj45]

+1

[dcfsc]

I have a global password file defined in /etc/ansible

I would love to right-click a vault.yml file, Choose "Ansible Vault > Encrypt" and have it encrypted without copying the path and flipping back to bash. Same with Decrypt.

[luispabon]

Transparent encrypt/decrypt would be swell :+1:

[jtognazzi]

I haven't try, but here is a workaround https://iuliusathome.blogspot.ch/2016/08/intellij-ansible-vaults-and-windows.html

[foozmeat]

I've done something similar to the above:

Prefs->Tools->External Tools->New

Name: Vault Edit Group: Ansible Program: parameters: edit $FileName$ working dir: $FileDir

script.sh:

#!/bin/sh

EDITOR=charm
ansible-vault --vault-password-file=<path to password file> "$@"

Assuming you have the pycharm cli tool installed this will open the decrypted vault in a new tab.

[Ivru]

+10

[nitay]

+1. @vermut any update on this? would love to have it as well

[lbajsarowicz]

Hi! To begin with - I'd like to say "Thanks" for the solutions provided before :+1:

Vault opens successfully and... closes in less than second. When I add sleep to bash script - this works.

How to force ansible-vault to wait for "save" action from PHPStorm?

[smehan]

+1 for built in support in the IDE.

[maximsnezhkov]

+1

[advena]

+1