Ansible - Managing multiple passwords with vault-ids

[xluffy]

👉 https://docs.ansible.com/ansible/latest/user_guide/vault.html#managing-multiple-passwords-with-vault-ids

TLDR:

> echo 'Lb1RnM+4VajYIsu' > ~./.vault_pass
> echo 'CCwYB4AtxDCLwyW' > ~/.vault_pass.prod

Ansible config

> cat ansible.cfg
[defaults]
inventory = ./inventories
roles_path = ./roles
module_utils = ./module_utils
remote_tmp = /tmp/.ansible-${USER}/tmp

vault_identity_list = default@./.vault_pass, prod@./.vault_pass.prod

Pick vault-id for ansible-vault

> ansible-vault encrypt --encrypt-vault-id default xxx.yml
> ansible-vault encrypt --encrypt-vault-id prod xxx.yml

Pick vault-id for playbook

> ansible-playbook --vault-id default playbooks/xxx.yml