WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(vault): separated vault binary install and service configuration; use provisioner artifacts directory to store HC vault setup information; set group level HC vault instance info

Browse source
This commit is contained in:
NaeiKinDus 2024-09-23 00:00:00 +00:00
parent b6695cf49c
commit c3305093e4
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
6 changed files with 69 additions and 62 deletions
Download patch file Download diff file Expand all files Collapse all files

18
collections/ansible_collections/nullified/infrastructure/roles/vault/tasks/initialize.yml
View file

@ -17,19 +17,19 @@
- name: set init data filename
no_log: true
ansible.builtin.set_fact:
hc_vault_init_data_filename: "{{ hc_vault_init_data_filepath | default('/tmp', True) }}/vault_{{ ansible_facts['fqdn'] }}_init.yml"
hc_vault_init_data_filename: "{{ hc_vault_init_data_filepath | default(provisioner_facts.artifacts_dir, True) }}/hashicorp_vault_{{ ansible_facts['fqdn'] }}_init.yml"
- name: save initialization data
connection: local
no_log: true
block:
- name: save content to temp file
ansible.builtin.copy:
content: '{{ init_data.stdout }}'
dest: '{{ hc_vault_init_data_filename }}'
mode: '0600'
owner: "{{ ansible_facts['user_id'] }}"
group: "{{ ansible_facts['user_id'] }}"
ansible.builtin.copy:
content: '{{ init_data.stdout }}'
dest: '{{ hc_vault_init_data_filename }}'
mode: '0600'
owner: "{{ ansible_facts['user_id'] }}"
group: "{{ ansible_facts['user_id'] }}"
vars:
ansible_python_interpreter: /usr/bin/python3
- name: print init data file location
no_log: true