system-config/playbooks/configure-vault.yaml

20 lines
676 B
YAML

---
# Manage Vault configuration (policies, roles, accesses, etc)
#
# vault_instances is a dictionary ({instance_name: config}) containing all the
# required information that is being passed one by one into the configure_vault
# role for the execution with the help of Vault API invocation.
#
# variable `vault_create_auth=true` will force presence of auth methods which
# are otherwise (default) not created
#
- hosts: vault-controller:!disabled
name: "Configure Vault instances"
tasks:
- name: Configure vault instance
include_role:
name: "configure_vault"
vars:
vault: "{{ item.value }}"
loop: "{{ vault_instances | dict2items }}"