From d2c948dd6a5751e59620f7a8ac7b51eb6a64ee5e Mon Sep 17 00:00:00 2001
From: Toshio Kuratomi <toshio@fedoraproject.org>
Date: Tue, 25 Aug 2015 14:51:32 -0700
Subject: [PATCH] Remove decrypted vault temp_file mistakenly left from patch
 making vault edit idempotent

This bug was introduced in commit f8bf2ba on July 27.  Hasn't gone out
in a release yet.
---
 lib/ansible/parsing/vault/__init__.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/ansible/parsing/vault/__init__.py b/lib/ansible/parsing/vault/__init__.py
index 14e71c0f6cd..55346166b6a 100644
--- a/lib/ansible/parsing/vault/__init__.py
+++ b/lib/ansible/parsing/vault/__init__.py
@@ -257,6 +257,7 @@ class VaultEditor:
 
         # Do nothing if the content has not changed
         if existing_data == tmpdata and not force_save:
+            os.remove(tmp_path)
             return
 
         # create new vault