Another option, IMO is to use GPG https://github.com/ansible/ansible/pull/7174
On Thu, Feb 16, 2017 at 6:31 PM, Andrew Feller <[email protected]> wrote: > Hi everyone, > > I would appreciate hearing peoples' various arguments for/against using > vault password files versus manually entering passwords. > > I've been manually entering in vault passwords as I didn't want to leave > keys on my laptop in case stolen / compromised. I've seen posts about > configuring git to decrypt vault files for diffing purposes > <https://selivan.github.io/2016/11/29/ansible-human-readable-git-diff-for-vault.html> > using vault password files for ease. After my knee-jerk wtf, I started > thinking about it in terms of using SSH identity and authorized key for > traversing hosts within your network easily. > > Thank you for your thoughts and insights, > Andy > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/ansible-project/f832238f-5e77-4565-a42b-3c14cc7978d6%40googlegroups. > com > <https://groups.google.com/d/msgid/ansible-project/f832238f-5e77-4565-a42b-3c14cc7978d6%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Nehal J Wani -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAG6NSrmfxxd5Q2atT8SA%3DpjB_OjMHRDL8%3DrqcRE8KcEnCrK-Qg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
