aioue / pilfer

Bulk decrypt all ansible-vault files recursively for search/editing, then re-encrypt them.

pilfer

Decrypt all ansible vault files in a project recursively for search/editing, then re-encrypt them all at once when you're done.

Borrows heavily from the excellent, but no longer supported Ansible Toolkit.

This project is no longer maintained. If you wish to maintain it, get in touch: pilfermaint()aioue.net

Tested with Ansible v2.5+

Usage

./bulk-decrypt-vault.py [open|close]

• Download bulk-decrypt-vault.py and place it at the root of your Ansible directories

• Edit the VAULT_PASSWORD_PATH in bulk-decrypt-vault.py to match your vault file destination

• Run ./bulk-decrypt-vault.py open to decrypt all vaulted files recursively

• Edit/search plaintext as needed

• Run ./bulk-decrypt-vault.py close to re-encrypt any changed files

  Any unchanged files will returned to their original state.

Requirements

pip install ansible ansible-vault pathlib