ansible-vault execution failed

[DesireWithin]

Hi
I try to run command just like examples
st2 run ansible.vault.decrypt vault_password_file=vault_pass files=vars.yaml
but result is failed:
ansible-vault: error: unrecognized arguments: --vault-password-file=vault_pass

Same result with Web GUI

[DesireWithin]

**_**id: 601cefd403985a338157f990
action.ref: ansible.vault.decrypt
context.user: st2admin
parameters:
cwd: /opt/stackstorm/packs/ansible
files: vars.yaml
vault_password_file: vars_pass
status: failed
start_timestamp: Fri, 05 Feb 2021 07:12:20 UTC
end_timestamp: Fri, 05 Feb 2021 07:12:22 UTC
result:
failed: true
return_code: 2
stderr: "usage: ansible-vault [-h] [--version] [-v]
{create,decrypt,edit,view,encrypt,encrypt_string,rekey}
...
ansible-vault: error: unrecognized arguments: --vault-password-file=vars_pass

usage: ansible-vault [-h] [--version] [-v]
{create,decrypt,edit,view,encrypt,encrypt_string,rekey}
...

encryption/decryption utility for Ansible data files

positional arguments:
{create,decrypt,edit,view,encrypt,encrypt_string,rekey}
create Create new vault encrypted file
decrypt Decrypt vault encrypted file
edit Edit vault encrypted file
view View vault encrypted file
encrypt Encrypt YAML file
encrypt_string Encrypt a string
rekey Re-key a vault encrypted file

optional arguments:
--version show program's version number, config file location,
configured module search path, module location,
executable location and exit
-h, --help show this help message and exit
-v, --verbose verbose mode (-vvv for more, -vvvv to enable
connection debugging)

See 'ansible-vault --help' for more information on a specific
command.
Executed command "/opt/stackstorm/virtualenvs/ansible/bin/ansible-vault --vault-password-file=vars_pass decrypt vars.yaml""
stdout: ''
succeeded: false**_**

[DesireWithin]

If I run command “/opt/stackstorm/virtualenvs/ansible/bin/ansible-vault decrypt vars.yaml --vault-password-file=vars_pass "
It will success:

INFRA [root@hostname ansible]# /opt/stackstorm/virtualenvs/ansible/bin/ansible-vault decrypt ./vars.yaml --vault-password-file=./vault_pass
Decryption successful

[DesireWithin]

I think root cause is clearly:
Stactstorm output the correct ansible-vault command but with wrong order

[amanda11]

Confirmed on an ansible-vault program that indeed running
ansible-vault --vault-password-file=<password file> decrypt <var file>
fails. But putting the --vault-password-file at end then it passes.

[DesireWithin]

I think ansible.vault.encrypt have same issue with decrypt