May be you need to use big template with some vars stored in vault storage?
On Friday, December 18, 2015 at 5:36:00 AM UTC+5, Colin Byrne wrote: > > > Hey, > > > So I have a large config file that needs to be encrypted when pushed to a > private repository. There are multiple server groups which it would be > pushed too, so ideally I would be able to pass vars in to it, depending on > the group. These vars would have to be encrypted as well. I feel like I > have a pretty good understanding of the vault and its capabilities and > limitations, and I am not sure if this would be possible for two reasons: > > > 1. Ansible vault does not seem to be able to encrypt full files, just > variable files (although my large config file is natively a .yml files, so > It may be possible in this case) > > 2. I haven't seen anyone else pass a vault variable into another > vault-decrypted file > > > I am still just getting started with ansible and am therefore pretty slow, > so I just wanted to know your opinions on the feasibility of this before I > invest the time. Is there another simple encryption method that I could > achieve the same results with? > > > Sincere thanks for any help, C > > > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/aca0e49e-52d9-40a4-a51b-24d3177d2cfe%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
