build

init.yml

@@ -1,16 +1,22 @@
 $ANSIBLE_VAULT;1.1;AES256
-61346664663261343639306239663033366631373339336365653939623737363035646538646162
-6337623436303837316136646364616132663162323530340a356633633563386464346561366338
-64333663366632303036356539383135356339643066343466316262343836393464306262303162
-3934356363663937640a663932323464326461623939326365653733353331653137663962333636
-64636663376338653234313364636261633137323431353837613134613336343762343231373135
-62396363383335336138323966393738666132396431656335303031376333386233626238316334
-34303038343865383336396263386665663433353936393866393066393033373666646637363931
-34323734316437323965363166376665376335343632623935313635373737643839363934316462
-39653333336533663030656335313266386332356638393532663261613330616530306438396366
-33353965666466323032616338373034653361323961643664323635333235633263623364633266
-39373535376637363962303065326139616163666634313566656136356132323237353863376564
-38666633323332303066353130663538623635656534373139346339653464663162626261303964
-35393731613234386463653334376534393030326339613138373065656161376332333532643838
-34643839636232626132383962623936306238393638306534396238623137346262373164363338
-663637343162386333646266393333366238
+62333862623563613039396534633138616436613564333030626135383034336434653232323135
+3566616664343765363366636632333165663336393530310a623238646636646363663339313962
+33636564393964666563346531393038626338303762353266666565386164303266353034323836
+3835373364383733650a386530633737353633333237613463313061356436613865306566306134
+64303838643832366638396438666339636462343136373336323964636463363162643830383365
+65333135306433383733636632343566636637343830663864633633333766626662393965653734
+38366637393263366233383238623231343434313633653733623262333662316234333764643762
+66336364383765386663643263633337376361396634336661643665613036303466353737303564
+32373565363436386166666334393633656462616439653431306430376665366132373337343839
+63643861396433383037633131363364653332373564326333393062376230633938356436383934
+38316263623131616139383737633164393232633532623631313532663762623935656633613563
+66323037366530326162393661336236323033653331616231323136663638636236343435373134
+35616261613132626437346237663439386432636236626464353865393665396366333239316266
+35333037613733306464323333313561326163646131393463643437353363366361323563343065
+36343936383764313735633661623136626366626131653930316233646664303835376566383565
+64313634643538623636336539383865646135343862663663623162616234656436663666363330
+66636432366638343064646433363862316463373535306565326662633532356661663133356539
+36313165633732383639383662613538346535316239366661383932636463326330323934343439
+39646536383631393863386263636437303130333238366565323762633532653530366634356530
+33386261633233613132633535633237336265363332313533663439633432303536663931613033
+38366232313436313834376466323264386665663137356231373232656230396230

roles/init/tasks/main.yml

@@ -152,9 +152,12 @@
           }
 
           auto_auth {
-            method "token_file" {
+            method "approle" {
+              mount_path = "auth/approle"
+
               config = {
-                token_file_path = "/etc/vault-agent/token"
+                role_id_file_path   = "/etc/vault-agent/role_id"
+                secret_id_file_path = "/etc/vault-agent/secret_id"
               }
             }
 
@@ -186,6 +189,22 @@
         group: root
         mode: '0600'
 
+    - name: Create file with role_id for vault agent
+      copy:
+        dest: /etc/vault-agent/role_id
+        content: "{{ vault_ssh-client_role_id }}"
+        owner: root
+        group: root
+        mode: '0600'
+        
+    - name: Create file with secret_id for vault agent
+      copy:
+        dest: /etc/vault-agent/secret_id
+        content: "{{ vault_ssh-client_secret_id }}"
+        owner: root
+        group: root
+        mode: '0600'
+
     - name: Create service for vault agent
       copy:
         dest: /etc/systemd/system/vault-agent.service