Solved! This was answered by Serge van Ginderachter at the devel list:
group_vars/all can also be a directory (and so can be any group or host name) so you could do group_vars/all/normalstuff.yml group_vars/all/vaultencryptedstuff.yml El jueves, 12 de junio de 2014 15:11:41 UTC+2, Xabier Larrakoetxea escribió: > > Hi! > > I think that this is not possible at this moment (I don't know if I'm > wrong) > > I want to load a common variables directory (*vars* for example like in > role levels) at playbook or inventory levels so I don't have to set the > *include_vars* or *vars_files* in each role or task. > > I want to do this because I want to store all my sensible data in > different encrypted files with vault, I could set this variables in > *group_vars* or *host_vars* but I don't want to encrypt all these files, > only the ones with the sensible data variables. > > This is my actual structure: > > ./ > ├── group_vars > │ ├── all > │ └── readme.txt > ├── inventories > │ └── sandbox > │ ├── group_vars > │ │ └── all > │ ├── hosts > │ ├── host_vars > │ │ ├── 1.db.master.sandbox.favorshare.org > │ │ ├── 1.lb.sandbox.favorshare.org > │ │ ├── 1.web.sandbox.favorshare.org > │ │ └── 2.web.sandbox.favorshare.org > │ └── > * vars│ └── sensible_data.yml* > ├── main.yml > ... > > Is a good approach? > I am wrong with some concepts or structure and is a better one? > Could be a feature for a pull request? > > Thank you! > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/d65accd2-ccd7-4a18-aedd-b97b0a534227%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
