build

roles/init/tasks/main.yml

@@ -168,4 +168,30 @@
         content: "{{ vault_sshcert_token }}"
         owner: root
         group: root
-        mode: '0600'
+        mode: '0600'
+
+    - name: Create service for vault agent
+      copy:
+        dest: /etc/systemd/system/vault-agent.service
+        content: |
+          [Unit]
+          Description=Vault Agent
+          After=network-online.target
+
+          [Service]
+          ExecStart=/usr/bin/vault agent -config=/etc/vault-agent/agent.hcl
+          Restart=always
+          User=jd
+          Group=jd
+
+          [Install]
+          WantedBy=multi-user.target
+        owner: root
+        group: root
+        mode: '0644'
+        
+    - name: Enable and start vault agent service
+      systemd:
+        name: vault-agent
+        enabled: yes
+        state: started