How to Encrypt a Password in Ansible Tower using Ansible Vault?

Hello Experts:

I am trying to use a username and password in Ansible Tower. I have this this encrypted defaults/secret.yml:

[awx@ip-172-31-17-130 defaults]$ more secret.yml
$ANSIBLE_VAULT;1.1;AES256
313334333361313131373836636138636139623638353064316231303165303438653262366637343562336164383466613930386634663037306534383431650a30323130323564

Open in new window

I then created this CREDENTIALS in Ansible Tower Vault Credential:

Finally, I linked this vault credential to my template:

However, when I run this Ansible playbook/role, both the password and username show as plain text as follows:

I was expecting to see the content of the encrypted file defaults/secret.yml file.

Is there a way to achieve this?
That is, to make thinkpad@102 and Administrator show as encrypted in the Ansible Tower output.

* ansible tower* AnsibleEncryption

Last Comment

wbens

8/22/2022 - Mon

wbens

1/6/2022

ASKER

I do not know if this can be done, and what I have done is as far as I can go. The only thing I have not done it encrypting the whole file itself.

If this cannot be done, then I would like to know. I am just looking to learn whether I am done with this Ansible task or if I can improve it by encrypting the username and password when they are echoed in the Ansible Tower output(s).

Thanks!

wbens

1/12/2022

ASKER

Hello Experts:

This is what I did to get around this. I deleted the task that outputs all of the information where the password is included. This is what I get now:

I am happy with that.

This is the code, just in case anyone finds it useful (I have been there looking for anything that helps me put code together):

Lines 78-80 is what was outputting the password and much more.

This is my solution.
Thanks!

ASKER CERTIFIED SOLUTION

wbens

1/12/2022

Become an EE member today7-DAY FREE TRIAL

Members can start a 7-Day Free trial then enjoy unlimited access to the platform

Learn why we charge membership fees

We get it - no one likes a content blocker. Take one extra minute and find out why we block content.

Not exactly the question you had in mind?

Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.

ask a question

All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat

William Peck