mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
The !vault YAML constructor returned a plain str, so round-tripping a host_vars file through utils.cache.yaml (e.g. apply_tor_node_onion writing services.tor.node) re-emitted every credential as an untagged quoted string. Ansible then never decrypted them and LDAP/DB admin binds failed with result 49. Return a VaultScalar so SafeDumper re-emits the !vault literal block; add a regression test asserting apply_tor_node_onion keeps existing vault credentials tagged. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>