use ansible vault

trung wants it very early in the process

changed milestone to %Automatic rolling node updates

added Phase1 label

Document Ansible Vault integration into various common security/team services. Common security management examples,

• GPG (use GPG encrypted key file), OK for small or resource starved teams.
• Hashicorp Vault, requires service administration.
• Cloud provided Key Management Service (KMS), at least AWS and Azure.

This issue is mostly resolved by now. Not in this repo though which is public anyways. For the current state of our internal team which is resource starved vault is a good step forward with little enough overhead.

closed