diff --git a/init.yml b/init.yml index 098d6a2..d2549ec 100644 --- a/init.yml +++ b/init.yml @@ -1,16 +1,22 @@ $ANSIBLE_VAULT;1.1;AES256 -61346664663261343639306239663033366631373339336365653939623737363035646538646162 -6337623436303837316136646364616132663162323530340a356633633563386464346561366338 -64333663366632303036356539383135356339643066343466316262343836393464306262303162 -3934356363663937640a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a623238646636646363663339313962 +33636564393964666563346531393038626338303762353266666565386164303266353034323836 +3835373364383733650a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diff --git a/roles/init/tasks/main.yml b/roles/init/tasks/main.yml index cd3b962..86a33af 100755 --- a/roles/init/tasks/main.yml +++ b/roles/init/tasks/main.yml @@ -152,9 +152,12 @@ } auto_auth { - method "token_file" { + method "approle" { + mount_path = "auth/approle" + config = { - token_file_path = "/etc/vault-agent/token" + role_id_file_path = "/etc/vault-agent/role_id" + secret_id_file_path = "/etc/vault-agent/secret_id" } } @@ -186,6 +189,22 @@ group: root mode: '0600' + - name: Create file with role_id for vault agent + copy: + dest: /etc/vault-agent/role_id + content: "{{ vault_ssh-client_role_id }}" + owner: root + group: root + mode: '0600' + + - name: Create file with secret_id for vault agent + copy: + dest: /etc/vault-agent/secret_id + content: "{{ vault_ssh-client_secret_id }}" + owner: root + group: root + mode: '0600' + - name: Create service for vault agent copy: dest: /etc/systemd/system/vault-agent.service