Molecule failes when use ansible vault.

[linuxpld]

Issue Type

• Bug report

Molecule and Ansible details

ansible --version && molecule --version                                                                                                                                                     
ansible [core 2.12.4]
  config file = None
  configured module search path = ['/Users/user/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /Users/user/Git/python-ansible/lib/python3.9/site-packages/ansible
  ansible collection location = /Users/user/.ansible/collections:/usr/share/ansible/collections
  executable location = /Users/user/Git/python-ansible/bin/ansible
  python version = 3.9.12 (main, Mar 30 2022, 14:33:51) [Clang 13.1.6 (clang-1316.0.21.2)]
  jinja version = 3.0.3
  libyaml = True

molecule 3.5.1 using python 3.9 
    ansible:2.12.4
    delegated:3.5.1 from molecule
    docker:1.1.0 from molecule_docker requiring collections: community.docker>=1.9.1
    vagrant:1.0.0 from molecule_vagrant

Molecule installation method (one of):

• pip

Ansible installation method (one of):

• pip

Detail any linters or test runners used:

In molecule.yml file, I have.

lint: |
  set -e
  yamllint .
  ansible-lint .

It behaves the same if no linter

Desired Behavior

According to this closed issue #1286 , I should be able to define variables in the molecule.yml and give the path to the vault file it should work but It seems it doesn't work.

Actual Behaviour

In molecule.yml file, I have

provisioner:
  name: ansible
  config_options:
    defaults:
      vault_password_file: "~/.ansible/vault/vault.pw"
  inventory:
    group_vars:
     password:
        device_key: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          38343932366663626637313537663530343735363335303131306661393037383731646133393866
          6361353536623536653966376361373732353933613934610a353532356530633032636361386165
          62353464366462653039326565393335393236663233623833306266373566363738373035306439
          6633323637313037340a653963636633373433653930666532663636643563343566336262636532
          6637

Molecule fails to execute with the following error:

molecule --debug test                                                                                                                                                                              
Traceback (most recent call last):
  File "/Users/user/Git/python-ansible/bin/molecule", line 8, in <module>
    sys.exit(main())
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/core.py", line 1128, in __call__
    return self.main(*args, **kwargs)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/core.py", line 1053, in main
    rv = self.invoke(ctx)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/core.py", line 1659, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/core.py", line 1395, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/core.py", line 754, in invoke
    return __callback(*args, **kwargs)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/click/decorators.py", line 26, in new_func
    return f(get_current_context(), *args, **kwargs)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/command/test.py", line 159, in test
    base.execute_cmdline_scenarios(scenario_name, args, command_args, ansible_args)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/command/base.py", line 97, in execute_cmdline_scenarios
    get_configs(args, command_args, ansible_args, glob_str), scenario_name
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/command/base.py", line 184, in get_configs
    configs = [
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/command/base.py", line 185, in <listcomp>
    config.Config(
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/config.py", line 63, in __call__
    obj = type.__call__(cls, *args, **kwargs)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/config.py", line 105, in __init__
    self.config = self._get_config()
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/config.py", line 258, in _get_config
    return self._combine(keep_string=MOLECULE_KEEP_STRING)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/config.py", line 302, in _combine
    self._preflight(s)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/config.py", line 418, in _preflight
    errors, data = schema_v3.pre_validate(data, env, MOLECULE_KEEP_STRING)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/model/schema_v3.py", line 372, in pre_validate
    data = util.safe_load(stream)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/molecule/util.py", line 245, in safe_load
    return yaml.safe_load(string) or {}
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/__init__.py", line 162, in safe_load
    return load(stream, SafeLoader)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/__init__.py", line 114, in load
    return loader.get_single_data()
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 51, in get_single_data
    return self.construct_document(node)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 60, in construct_document
    for dummy in generator:
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 413, in construct_yaml_map
    value = self.construct_mapping(node)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 218, in construct_mapping
    return super().construct_mapping(node, deep=deep)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 143, in construct_mapping
    value = self.construct_object(value_node, deep=deep)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 100, in construct_object
    data = constructor(self, node)
  File "/Users/user/Git/python-ansible/lib/python3.9/site-packages/yaml/constructor.py", line 427, in construct_undefined
    raise ConstructorError(None, None,
yaml.constructor.ConstructorError: could not determine a constructor for the tag '!vault'
  in "<unicode string>", line 34, column 21:
            device_key: !vault |
                        ^

[ssbarnea]

That was never supported by molecule, you cannot use !vault constructs in molecule.yml file, but you can use them in ansible playbooks.