I have pushed the ansible code by Duck mantained in his gitlab repo to our infra-ansible repo in gerrit. So now it is ready to use and all feature ansible code should be maintained there.

I did a review of it and its history and it looked ok for me. I might have some concerns about Ansible Vault solution in general related to its lack of forward secrecy, but it is a global discussion to have anyway. 

However. To be safe as I do not know if all team members concerns has been addressed (I checked all that I were aware off to makes sure they are) I made this repo available to infra-ansible group only for now. We should be able to make it public later though and it is ok for me.

Anton.
--