Ansible Vault

plbk_vault.yml

---
# file: playbooks/plbk_test_vault.yml

- hosts: localhost
  user: include

  vars_files:
    - ../files/vault/ec2/prd/svc_master_key.yml

  tasks:

  - name: GENERATE mktemp file
    command: mktemp /Users/include/playbook.XXXXX
    register: tmpfile

  - name: LOAD VAULT into mktemp file
    shell: echo "{{ svc_master_key }}" > "{{ tmpfile.stdout }}"

  - name: UPLOAD KEY
    copy: >
      src="{{ tmpfile.stdout }}"
      dest=/Users/include/foobar2.pem

  - name: REMOVE mktemp file
    file: >
      path={{ tmpfile.stdout }}
      state=absent