Decrypt config.cnf with ansible vault when running a playbook

Asked Jan 04 '19 at 15:04

Active Jan 04 '19 at 18:55

Viewed 129 times

I am running a playbook that executes a MySQL update command with

--defaults-extra-file=vault/config.cnf.

This file is encrypted with ansible vault to protect MySQL credentials.

The problem is that when I run ansible-playbook

--vault-id ~/vault/vault-passwd

the MySQL config file is not decrypted and the playbook fails.

Is there a solution to this problem?

edited Jan 04 '19 at 18:55

Arslanbekov Denis

asked Jan 04 '19 at 15:04

secicf

I can propose, use absolute path for `--vault-id` (without ~) – Arslanbekov Denis Jan 04 '19 at 15:45
it didn't work. I think that we cannot encrypt and decrypt files with ansible vault but only variables :/ – secicf Jan 04 '19 at 15:53
No, you can encrypt and decrypt a file, no only variables. – Arslanbekov Denis Jan 04 '19 at 19:24

0 Answers0