May be you need to use big template with some vars stored in vault storage?
On Friday, December 18, 2015 at 5:36:00 AM UTC+5, Colin Byrne wrote: > > > Hey, > > > So I have a large config file that needs to be encrypted when pushed to a > private repository. There are multiple server groups which it would be > pushed too, so ideally I would be able to pass vars in to it, depending on > the group. These vars would have to be encrypted as well. I feel like I > have a pretty good understanding of the vault and its capabilities and > limitations, and I am not sure if this would be possible for two reasons: > > > 1. Ansible vault does not seem to be able to encrypt full files, just > variable files (although my large config file is natively a .yml files, so > It may be possible in this case) > > 2. I haven't seen anyone else pass a vault variable into another > vault-decrypted file > > > I am still just getting started with ansible and am therefore pretty slow, > so I just wanted to know your opinions on the feasibility of this before I > invest the time. Is there another simple encryption method that I could > achieve the same results with? > > > Sincere thanks for any help, C > > > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/aca0e49e-52d9-40a4-a51b-24d3177d2cfe%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
