The ansible vault  allows file encryption and requires a password to unencrypt Command: ansible-vault encrypt <file> The ansible-vault rekey command will allow you to re–encrypt a file and reset the password To supply the vault password during play execution, you must use either of the –ask-vault-password or –ask-vault-file flags Ansible 2.4 introduces the –vault-id feature…

It is possible to control the number of hosts acted upon at once tie by Ansible. The Ansible process will create forks to execute actions in parallel. Parallelism is the word used for Ansible default ability to interact with multiple hosts at the same time. The parallel processes spawned by Ansible are known as forks…

Ansible Galaxy (https://galaxy.ansible.com/) is essentially a large public repository for sharing and downloading community developed ansible roles. Roles ship with readmes detailing role use and available variables. Galaxy contains a large number of roles that are constantly evolving and increasing. Galaxy can use git allowing for other role sources such as GitHub. The ansible-galaxy utility…

Roles The default location for roles is /etc/ansible/roles Roles provide a way to automatically load certain vars_files, tasks and handlers based on a known file structure Roles expect a particular directory structure Directories not being used may be excluded Each directory in use contains a main.yml with relevant content Roles Directories Tasks – Contains the…

Variables can contain letters, numbers and underscore, but must begin with a letter Can be stored as dictionaries which map keys to values. Dictionary variables can be refenced using bracket notation or dot notation, ex: dictionary_name [‘filed’] or dictionary.field Variables stored as a list (array) may be accessed by putting the element number in brackets:…