In this recipe, we'll explore one of the recommended Ansible principles of separating host inventory information from variables that define per-host and per-group behaviour. We've already seen in the previous recipes that we can break out variables into a group definition within the Ansible inventory file, and in this recipe, we'll take it further by making a specific file to define per-group variables. We'll consider the case where some of the variables in that per-group profile might contain sensitive information and require protection. Indeed that is the case for our use of the JUNOS_* Ansible core modules because they require us to communicate SSH username and passwords.





















































