Python script to decrypt while running the playbook - Ansible Vault

Question

I have an ansible playbook that has few variables that are encrypted using the vault. I have a python script that has the passwords to decrypt those variables. How do I embed that script while running the playbook?

Answer 1

Ansible provides a feature where you can pass the password file or a script to be used while running the playbook. You can use --vault-password-file flag for this purpose and then add the filename. Something like this:

ansible-playbook site.yml --vault-password-file pswd.py