hello_world_vault_encrypted.yml

# Note:  The password for `encrypted_msg` is just 'vault'
# 
# This playbook is just used for testing vault integration, so when provided
# with the correct password the message displayed should be:
#
#   "Hello World! (NOTE: This message has been encrypted with ansible-vault)"
#
# This var was generated by running the following:
#
#   $ ansible-vault encrypt_string --ask-vault-pass --stdin-name "encrypted_msg"
#   New Vault password:
#   Confirm New Vault password:
#   Reading plaintext input from stdin. (ctrl-d to end input)
#   Hello World!
#   encrypted_msg: !vault |
#     $ANSIBLE_VAULT;1.1;AES256
#     66383635373066393337333631383930366166656134653935663164636636623239333861643936
#     3664613065666439303135323331616666383030383839310a303461623264646233623037313363
#     63626562616166353466366232363562353461366162396262363461666439386165663565643832
#     3239396633396466630a616463393237303338633562656664653433633437383161353933303737
#     3764
#     Encryption successful
#
# (NOTE: When running the above, Ctrl-D was required twice for `ansible-vault`
# to respond.  Most likely due to the '!' character in the base string.)
#
- name: Hello World Sample (Vault Encrypted)
  hosts: all
  vars:
    encrypted_msg: !vault |
      $ANSIBLE_VAULT;1.1;AES256
      66383635373066393337333631383930366166656134653935663164636636623239333861643936
      3664613065666439303135323331616666383030383839310a303461623264646233623037313363
      63626562616166353466366232363562353461366162396262363461666439386165663565643832
      3239396633396466630a616463393237303338633562656664653433633437383161353933303737
      3764
  tasks:
    - name: Hello Message
      debug:
        msg: "{{encrypted_msg}} (NOTE: This message has been encrypted with ansible-vault)"