Over the past few weeks, we've explored Ansible Vault, learning about its purpose and how it can be utilized.  You can create fully encrypted files and perform granular, inline encryption on single variables.  Your secrets, hopefully, are no longer stored in plain text.

But there's still one manual...

Last week, we discussed the ticking time bomb of hardcoded passwords and why secure secrets management is a non-negotiable skill for DBAs.  We identified Ansible Vault as the right tool for the job, but theory only gets you so far.

Today, we get our hands dirty.

We're going to take our first step ...