Basic

ansible-vault

• ansible-vault encrypt/decrypt 'file'
• ansible-vault view/edit 'file'
• ansible-playbook 'yaml-file' --ask-vault-pass

vars_files

playbook中指派，亦可用include_vars在task 语句里面调用

include_vars 优于 role vars 优于 var_files 优于 host_vars

host_vars

specific host variables, such as rtr1, core_sw1, 冲突时优于group_vars

group_vars

Group variables, such as nexus_devices, cisco_devices, 冲突时优于var_files

Ansible Variable precedence - From least to most important

• role defaults
• inventory file or script group vars
• inventory group_vars/all
• playbook group_vars/all
• inventory group_vars/*
• playbook group_vars/*
• inventory file or script host vars
• inventory host_vars/*
• playbook host_vars/*
• host facts
• play vars
• play vars_prompt
• play vars_files
• role vars (defined in role/vars/main.yml)
• block vars (only for tasks in block)
• task vars (only for the task)
• role (and include_role) params
• include params
• include_vars
• set_facts / registered vars
• extra vars (always win precedence)