Advanced Python CLI to rotate the secret used for ansible vault inline secrets and files in a project
- Reencrypt vault files
- Reencrypt inline vaulted secrets
It is strongly recommended to use pipx instead of pip if possible:
pipx install ansible-vault-rotateOtherwise you can also use plain pip, but be warned that this might collide with your ansible installation globally!
pip install ansible-vault-rotateansible-vault-rotate --old-vault-secret-source file://my-vault-password \
--new-vault-secret-source my-new-secret \
--update-source-secretansible-vault-rotate --old-vault-secret-source file://my-vault-password-<stage> \
--new-vault-secret-source my-new-secret \
--file-glob-pattern group_vars/<stage>/*.yml \
--update-source-secretansible-vault-rotate --helpFor development, you will need:
- Python 3.9 or greater
- Poetry
poetry install
poetry run pytest
![renovate[bot]](https://avatars.githubusercontent.com/u/29139614?size=120)
