vault-agent

Install, set up, and manage vault-agent

Role Philosophy

Check out ansible-consul for more information.

Role Variables

Refer to defaults/ for more details and examples.

vault_agent_version

• The version to use.

vault_agent_dirs

• A list of directories to create.
• Default settings:

vault_agent_dir: "/opt/vault"
vault_agent_dirs:
  main:
    path: "{{ vault_agent_dir }}"
  configs:
    path: "{{ vault_agent_dir }}/config.d"
  templates:
    path: "{{ vault_agent_dir }}/template.d"
  certs:
    path: "{{ vault_agent_dir }}/certs"
  logs:
    path: "/var/log/vault-agent"

vault_agent_config

• The main configuration file.
• Example: See defaults/example.yml.

vault_agent_templates

• A list of templates to create in the template.d directory.

vault_agent_user

• The user who owns the vault-agent process and files.
• Default: root.

vault_agent_group

• The group for the vault_agent_user.
• Default: root.

vault_agent_download_url

• The URL to download the vault-agent archive from.
• Default: https://releases.hashicorp.com.

vault_agent_service

• The OpenRC service file.
• Default: See defaults/main.yml.

vault_agent_unitfile

• The systemd unit file.
• Default: See defaults/main.yml.

skip_handlers

• Whether to skip restart/reload - useful for building images with Packer.
• Default: false.

Tags

• config - Update the vault-agent unit/service file and sync configuration files.

Author

• Anatoly Laskaris - nahsi