Using ansible playbook with securely stored variables

•1 min read

•

ansible,
debian,
linux,
playbook,
security

3 PC
- 1 control plane
- 2 workers
for simplicity of this example we use same users and passwords in all the machines

plaintext
your-project/
| -- ansible.cfg
|-- debian12/
|   |-- inventory.yaml
|   |-- update-packages.yaml
└── group_vars/
    └── all/
        ├── vars.yaml          # Create this
        └── vault.yaml         # Create this (encrypted)

Create group_vars/all/vars.yaml:

sh
cat > debian12/group_vars/all/vars.yaml << 'EOF'
---
# Public variables
ansible_port: 22
ansible_user: "{{ vault_ansible_user }}"
ansible_password: "{{ vault_ansible_password }}"