Using ansible-vault, check out this gist: https://gist.github.com/tristanfisher/e5a306144a637dc739e7 https://gist.github.com/tristanfisher/e5a306144a637dc739e7

Using ansible-vault, check out this gist: https://gist.github.com/tristanfisher/e5a306144a637dc739e7 https://gist.github.com/tristanfisher/e5a306144a637dc739e7 Having a partly encrypted YAML file is also available since version 2.3.0 Key management and deployment are two different things. Installing up people's private keys on the hosts, doesn't involve any management. It's a standard sysadmin procedure. Key managements involves policies such as: key rotation, algorithms to use, access restriction control, etc. It is way more daunting and complex. I don't see how ansible what ansible has to do with this, vaultproject on the other hand has most of the these features (and more) build-in. Never used it, but I know about it through a podcast presentation of vault in "Arrested Devops" IIRC.