feat(vault): separated vault binary install and service configuration; use provisioner artifacts directory to store HC vault setup information; set group level HC vault instance info

This commit is contained in:
NaeiKinDus 2024-09-23 00:00:00 +00:00
parent b6695cf49c
commit c3305093e4
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
6 changed files with 69 additions and 62 deletions

View file

@ -2,6 +2,8 @@
# global parameters
custom_base_user_account: "{{ vault_custom_base_user_account }}"
custom_github_token: "{{ vault_custom_github_token | default('') }}"
hc_vault_instance: "{{ vault_hc_vault_instance }}"
hc_vault_instance_options: "{{ vault_hc_vault_instance_options }}"
# security parameters
security_clamav_version: 1.3.1

View file

@ -6,3 +6,4 @@ provisioner_kubeconfig_repository: /srv/ansible/kubeconfig
provisioner_kubectl_binary_path: /usr/local/bin/kubectl
provisioner_k3sup_binary_path: /usr/local/bin/k3sup
provisioner_tofu_binary_path: /usr/bin/tofu #do not change this, the path is decided by the .deb package
provisioner_vault_binary_path: /usr/local/bin/vault