Encrypt passwords.yaml file with ansible vault and decrypt while deploying

[Prithiv]

Passwords.yaml file is visible to all. It should be encrypted using ansible-vault with a password and decrypt it when running kolla-ansible deploy with vault password

[Steven Dake (sdake)]

Is ansible-vault freely available?

[Prithiv (prithiv)]

@ sdake yes it is just another command in ansible.

http://docs.ansible.com/ansible/playbooks_vault.html

[Prithiv (prithiv)]

kolla-ansible deploy runs ansible-playbook in the backend. Instead of that, we just have to run ansible-vault --decrypt. It would ask for the password. Once the password is entered, it will resume the normal deploy operation.

[Prithiv (prithiv)]

sdake, any update on this ?

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/314945

[OpenStack Infra (hudson-openstack)]

Change abandoned by Mauricio Lima (<email address hidden>) on branch: master
Review: https://review.openstack.org/314945
Reason: no activity in 4 months