computer-playbook/group_vars/all

group_vars/all 📦

This directory contains the Ansible group_vars applied to every host in the inventory. It holds the shared baseline that every role and every host-specific var can build on top of.

Scope 🎯

Variables in this directory MUST apply across all hosts and all roles. Typical examples are the software identity, deployment toggles, domain defaults, the central network and port registries, OIDC and LDAP endpoints, design tokens, and resource defaults.

Role-specific configuration MUST NOT live here, even when only one role reads it today. Such values belong in the corresponding role:

• roles/<role>/meta/services.yml for anything an operator may override, because the inventory's applications.<role> block is deep-merged on top of it and lookup('config', application_id, '<path>') reads the result.
• roles/<role>/vars/main.yml for values derived from that configuration, and for those the role fixes. Role vars outrank inventory variables, so a value placed here cannot be overridden per host.

File naming and load order 🔢

Files MUST use the pattern NN_<topic>.yml, where NN is a zero-padded two-digit numeric prefix. Ansible loads files in lexicographic order, so the prefix determines the load order and lets later files reference values defined earlier.

Prefixes MUST be unique and sequential without gaps. When you add, remove, or reorder a file, you MUST update every hard-coded reference in code, tests, and documentation to keep the sequence consistent. You SHOULD grep for group_vars/all/<old-name>.yml before renaming.