From the course: Ansible: From Basics to Guru by Pearson

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Using Vault to store sensitive information

Using Vault to store sensitive information - Ansible Tutorial

From the course: Ansible: From Basics to Guru by Pearson

Start my 1-month free trial Buy for my team

Using Vault to store sensitive information

“

In this video, we'll talk about Vault. Vault is what you use to work with sensitive values in Ansible. So some modules do require sensitive data to be processed. And this may include web keys, passwords and more. And if you want to process sensitive data in a secure way, Ansible Vault is a solution. Ansible Vault is used to encrypt and decrypt files. And to manage this process, the Ansible Vault command is used. In case you are wondering, do I really need this? Well, figure this. If you work with Ansible, in very many cases, your Ansible playbooks will end up in a Git repository. Now, what is going to happen if your playbook contains these sensitive values, or if you copy over a variables file to the Git repository? Let's just imagine that you are working on Ansible to create instances in AWS. Now you need a WebKey and this WebKey is opening your AWS environment completely. Do you really want to store that in a Git repository? I don't think so. That's why you need Vault. Let me show…

Contents