Add support for ansible-vault for secret generation
Sem-Ver: feature
Change-Id: I4e56ea595618c2646158a29395856958fa567b59
diff --git a/playbooks/generate_secrets.yml b/playbooks/generate_secrets.yml
index 88dbf23..6ed535c 100644
--- a/playbooks/generate_secrets.yml
+++ b/playbooks/generate_secrets.yml
@@ -30,3 +30,9 @@
ansible.builtin.copy:
content: "{{ secrets | to_nice_yaml }}"
dest: "{{ secrets_path }}"
+
+ - name: Encrypt secrets file with Vault password
+ ansible.builtin.shell:
+ ansible-vault encrypt --vault-password-file {{ secrets_vault_password_file }} {{ secrets_path }}
+ when:
+ - secrets_vault_password_file is defined
\ No newline at end of file