I have been working on a way to have credentials and secrets used by Ansible playbooks to be stored in a central location, so that they can be managed in a much more automated way. 1Password seems to fit the bill nicely, especially since the CLI tool runs on Linux and outputs in JSON. We are considering the enterprise version at this time.
I've got most everything working well with the exception of giving Ansible a way to update passwords in 1Password. Without this, I'm forced to have Ansible do the work of changing passwords on our internal systems, and then notifying somebody to manually update the password in 1Password. This is less than ideal.
As a workaround, I am considering using the CLI to delete an item and then re-create it. I lose history this way and this has more room for error being a multi-step process, but I would consider this if it's possible your team will add this feature in the future.
Before I continue my work on this, I'm posting to find out if you think deleting & creating items is a reasonable method. Or maybe there is another method you can recommend that I'm not seeing.
1Password Version: 0.5.5
Extension Version: Not Provided
OS Version: RHEL 7
Sync Type: Not Provided