Description
Ansible workspace for JetBrains IDEs.
Smart Ansible-aware YAML support, inventory navigation, vault operations and infrastructure workflows — without interfering with Kubernetes, Helm, GitHub Actions or generic YAML projects.
The plugin activates only inside Ansible-shaped projects (playbooks, roles, group_vars, host_vars, inventories, or any folder with ansible.cfg / .ansible-lint). It stays silent in Helm charts, Kubernetes manifests, GitHub Actions workflows and Docker Compose files.
Free tier
- Scope-aware activation. Hard-negative path patterns and project markers decide whether a YAML is Ansible. Nothing fires elsewhere — Helm, Kubernetes, GitHub Actions and Docker Compose YAML stays untouched.
- Code intelligence. Completion, hover documentation, navigation and diagnostics powered by the official Ansible language server.
- Inventory navigation. Ctrl+B between group / host names and matching
group_vars/<name>/host_vars/<name>; bidirectional jumps between inventory declarations and playbook usages (hosts:,delegate_to:); back-navigation banner on vars files; precedence-aware override line markers. - Inventory completion & hover. Known group / host names suggested when typing the value of a host-targeting key; Ctrl+Q popup lists declaring inventory files and resolves nested
children:. - Role navigation. Ctrl+B on a role name in
roles:,dependencies:andinclude_role:/import_role:(incl. FQCN) jumps to the role folder, with monorepo-aware lookup across multipleroles/trees. ansible.cfglanguage support. Highlighting plus section / key completion.- Folder icons for
playbooks/,roles/,group_vars/,host_vars/,inventory/andinventories/inside Ansible projects. - Dependency manager. Settings → Tools → Ansible has a page per tool (
ansible-language-server,ansible-lint,ansible-playbook,molecule,ansible-vault) showing its status, with an in-IDE installer (npm / pnpm / yarn / bun for the LSP; pip / pipx / brew for Ansible) and a per-tool override path.
Professional features
- Ansible Vault operations. Vault file recognition, file decrypt / view / encrypt actions, inline
!vaultvalue decrypt / view, and inline value encryption from the editor popup. - Transparent Vault editing. Edit decrypted content in memory and re-encrypt it automatically on save / tab close; optional
--vault-idlabel support and a retry-without-id fallback on decryption errors. - Vault password providers. Pluggable source of vault passwords — macOS Keychain (built-in
securityCLI, no JNI, per-vault-id account),pass(passwordstore.org, the Linux-first store) with a configurable entry template, and 1Password CLI (op) with a configurable secret reference template all ship in-box. Interactive modal prompt stays the free-tier default; machine-backed providers require an active plugin license. - Multi
vault-idorchestration. Per-project table under Settings → Tools → Ansible → Vault password providers maps eachvault-idlabel to a specific provider (e.g.prod→ 1Password,staging→ Keychain,dev→pass), with a fallback row used when no id matches. Encrypt / decrypt flows route the password request automatically without a provider picker. Paid tier; free tier keeps the interactive prompt. - Playbook run workflows. Dedicated
ansible-playbookrun configuration, gutter run icon onhosts:, and ready-to-use run presets (dry-run, syntax check, tags, start-at-task) with inventory-aware option pickers and project-relative inventory labels. - AAP/AWX integration. Test connection, list job templates, launch jobs with extra-vars from the IDE and inspect job stdout after completion.
- Inventory tooling. Inventory graph view (group / host relations in an editor tab) and variable rename refactoring propagated across
group_vars,host_varsand inventoryvars:peers. - Molecule tooling. One-click action to run
molecule testin the IDE terminal. - Lint run configuration. Dedicated
ansible-lintrun configuration with clickable output that jumps straight to the failing rule / task; right-click any Ansible YAML to lint the file or run it on the whole project. - Syntax check run configuration. Dedicated
ansible-playbook --syntax-checkrun configuration — right-click any playbook, or use the gutter icon onhosts:, to validate the play before a real run. Console output turns quoted YAML error headers ('<path>': line N, column M) into clickable links that jump straight to the failing task.
Planned (not in current release)
- Bundled Node +
ansible-language-serverin the plugin distribution so a globalnpm installis no longer required. - Deeper AAP/AWX: saved launch presets per template, "Relaunch last job" shortcut, live-streaming job stdout.
- Galaxy roles / collections panel with install / update from
requirements.yml.
Requirements
The plugin shells out to ansible-language-server (npm) for language smarts and ansible-vault (part of Ansible) for vault operations. Both binaries are checked on file open; the plugin offers an actionable balloon and an in-IDE installer when something is missing.
Targets unified IntelliJ IDEA 2025.2+ (free and Ultimate). Legacy Community editions are out of scope.
The long-term goal of the plugin is to turn JetBrains IDEs into a full Ansible operations workspace, not just a YAML editor.