What is the recommended project structure for organizing Ansible Vault-encrypted variable files in a role-based project?
-
A
Store encrypted secrets in group_vars/<group>/vault.yml and plaintext variables in group_vars/<group>/vars.yml
-
B
Store all variables including secrets in a single encrypted file per group
-
C
Store secrets in roles/rolename/vault/ directory
-
D
Store secrets in a separate repository from the playbooks