In my hosts file, I have
GroupB. Configuration for GroupB includes some sensitive data, and therefore I created
group_vars/GroupB.yml and encrypted it with Ansible Vault.
I have a playbook with
hosts: GroupA. When I run the playbook, Ansible fails because I didn't provide the password for
GroupB was never invoked anywhere, so why would it try to decrypt that file? What might I be overlooking or misunderstanding - or is this in fact the intended behavior?