I'm having an odd issue with vaulted variable files when running playbooks 
from my local machine. The vaulted vars are not defined, even though I am 
supplying the correct password at the prompt. I've also tried using 
--vault-password-file and the outcome doesn't change.

I'm not sure how to troubleshoot this. The vaulted vars are working fine 
when I run the playbook from a remote Jenkins box, they only fail locally. 
Could there be something in my local ansible.cfg, or a setting in another 
area that ansible is looking at that would override the supplied vault 
password?

Here is an example playbook:

---

- hosts: all
  gather_facts: False
  become: False
  tasks:

    - name: Test unvaulted var
      debug:
        var: msr_office_ip

    - name: Test vaulted var
      debug:
        var: vaulted_var



And some output showing the problem:

$ ansible-playbook --vault-id @prompt -i environments/test run_ping_test.yml
Vault password (default):

PLAY [all] 
***************************************************************************************

TASK [Test unvaulted var] 
************************************************************************
ok: [127.0.0.1] => {
    "unvaulted_var": "this text is not vaulted"
}

TASK [Test vaulted var] 
**************************************************************************
ok: [127.0.0.1] => {
    "vaulted_var": "VARIABLE IS NOT DEFINED!"
}

PLAY RECAP 
***************************************************************************************
127.0.0.1                  : ok=2    changed=0    unreachable=0    failed=0


And the contents of test.vault:
 

$ ansible-vault view environments/test/group_vars/all/test.vault
Vault password:
---

vaulted_var: this text is vaulted

 

Anyone have any idea what I am doing wrong? TIA

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/599ff6b0-ade6-4738-a776-cee092ec5985%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to