This is a lookup module for generic secrets in Vault(the HashiCorp project).
The plugin is currently written for ansible 2.0 but a working version for ansible 1.9 exist under the 1.0.0 tag.
lookup plugins can be loaded from several different locations similar to $PATH, see docs.
The address to the Vault server and the auth token are fetched from environment variables
export VAULT_ADDR=http://192.168.33.10:8200/
export VAULT_TOKEN=56f48aef-8ad3-a0c4-447b-8e96990776ff
ansible-vault then works as any other lookup plugin.
- debug: msg="{{lookup('vault', 'secret/foo')}}"