---
# Manage Vault configuration (policies, roles, accesses, etc)
#
# vault_instances is a dictionary ({instance_name: config}) containing all the
# required information that is being passed one by one into the configure_vault
# role for the execution with the help of Vault API invocation.
#
# variable `vault_create_auth=true` will force presence of auth methods which
# are otherwise (default) not created
#
- hosts: vault-controller:!disabled
  name: "Configure Vault instances"
  tasks:
    - name: Configure vault instance
      include_role:
        name: "configure_vault"
      vars:
        vault: "{{ item.value }}"
      loop: "{{ vault_instances | dict2items }}"