Ansible vault decrypter - supports partially encrypted files

vault_decrypter.py

import argparse
import getpass
import yaml
from ansible.parsing.utils.yaml import from_yaml
from ansible.parsing.vault import VaultSecret


def main(input_filename, secret, output_filename):
    result = from_yaml(
        open(input_filename),
        vault_secrets=[('', VaultSecret(secret))],
    )
    stripped = {}
    for k, v in result.items():
        stripped[str(k)] = str(v)

    with open(output_filename, 'w') as f:
        f.write(yaml.dump(stripped, default_flow_style=False))


if __name__ == '__main__':
    parser = argparse.ArgumentParser(description='Vault decrypter')
    parser.add_argument('input_filename')
    parser.add_argument('output_filename')
    args = parser.parse_args()
    secret = getpass.getpass('Please input secret: ')
    main(args.input_filename, secret, args.output_filename)