Manage group_vars with vault?

Archives Ansible Project
1

I’d like to manage a subset of group_vars variables with vault. That is, split the variables “group_vars/all” so that some are in plaintext and some are managed by vault. Is it possible for “group_vars/all” to -include a vault managed file? I’d like to use the normal group_vars mechanism but encrypt certain variables. I didn’t see how to do this type of include in the docs.

Thanks.

2

Group variables can’t “include” another group variables, but variables from all groups a host are loaded in are loaded.

So you can just make a host a member of a subgroup, and then “all” will get loaded and “subgroup” will overwrite the variables in all.