On a private CI's and Source Control Repositories like Gitlab-ce it is possible to copy an ~/.vault_pass.txt to the server and let it use by the CI to decrypt files using Ansible.
On public CI's and Source Control Repositories like Bitbucket it is not possible to copy a ~/.vault_pass.txt to the CI server it self.
In Bitbucket it is possible to define encrypted variables, but when this file is checked the only VAULT related variables are:
These variables are not an option to solve the issue as when the
ANSIBLE_ASK_VAULT_PASS is set
ansible-vault still prompts:
user@host $ Vault password:
When the same password is entered it can open the encrypted file, but the aim is to open the file without needing a file or entering a password in a prompt.
Another attempt to solve the issue was running
export ANSIBLE_ASK_VAULT_PASS=<ansible-vault-password>, but the interactive mode persists.
Another option is
export ANSIBLE_VAULT_PASSWORD_FILE=~/.vault_pass.txt, but then this file needs to be pushed to the repository, but source Control repositories should not contain passwords.