Skip to content

Instantly share code, notes, and snippets.

@fvoges
Created March 28, 2022 12:46
Show Gist options
  • Save fvoges/9aa1b16a8f4980c6304614d462d7c683 to your computer and use it in GitHub Desktop.
Save fvoges/9aa1b16a8f4980c6304614d462d7c683 to your computer and use it in GitHub Desktop.
Vault Ansible playbook
---
# common values in inventory/group_vars/all.yaml
- hosts: vault_do
become: true
roles:
- role: ansible-role-vault
vars:
vault_ansible_group: 'vault_do'
vault_tls_leader_servername: 'vault.local'
vault_cluster_name: vault-primary
vault_license_file: 'PATH_TO/vault.hclic'
vault_local_binary_location: 'PATH_TO/common/bin/vault'
vault_tls_ca_cert_file: 'PATH_TO/tls/simple-ca/ca/ca.crt'
vault_tls_cert_file: 'PATH_TO/tls/simple-ca/certs/vault.local.crt'
vault_tls_key_file: 'PATH_TO/tls/simple-ca/certs/vault.local.key'
- role: ansible-role-vault_extras
- hosts: vault_do_pr
become: true
roles:
- role: ansible-role-vault
vars:
vault_ansible_group: 'vault_do_pr'
vault_tls_leader_servername: 'vault.local'
vault_cluster_name: vault-pr-secondary
# # vault_seal:
# # type: transit
# # address:
# # key_name:
# # tls_ca_path:
# # tls_client_cert:
# # tls_client_key:
- role: ansible-role-vault_extras
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment