On Wednesday, May 21, 2014 5:44:32 PM UTC+3, Serge van Ginderachter wrote:
>
>
> On 21 May 2014 16:39, Hagai Kariti <[email protected] <javascript:>> wrote:
>
>> I currenty use vars_files because Ansible doesn't include these files 
>> automatically. I was suggesting making a standard place to put vaulted 
>> group_vars (or host_vars) and gave mine as an example.
>> Do you object to the idea or just my convention?
>>
>
> ​At least the convention, beneath group_vars is definetely not the right 
> place​.
> The idea, I'm not sure what exactly having this standard place would 
> exactly mean?
>

It's really the same idea as group_vars. For each group a host is a member 
of, two files are included:
- The file under group_vars/, as usual
- The vaulted file under the vaulted group_vars dir

This allows you to separate the sensitive and normal parts of your 
group_vars, so that you won't lose version control on the normal parts. 

Vault files are just encrypted files, users might want to 'vault' a file at 
> any location they want.
>
>
Same thing can be said about group_vars. You can include any variable file 
you want, but having a convention that uses your hostgroup structure is a 
good thing.
 

> Say you have a default vault dir somewhere, what would happen then?
>
>  

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/7be076db-01f6-4b49-bfc2-f23fcf226013%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to