homelab/ansible/playbooks/HashicorpStack.yml

38 lines
988 B
YAML
Raw Normal View History

2022-11-29 20:23:44 +00:00
---
2023-10-29 14:35:11 +00:00
- name: Vault install
hosts: homelab
roles:
- role: ansible-hashicorp-vault
2023-08-26 15:30:41 +00:00
become: true
2023-10-29 14:35:11 +00:00
post_tasks:
- name: Generate nomad token
community.hashi_vault.vault_token_create:
renewable: true
policies: "nomad-server-policy"
period: 72h
no_parent: true
token: "{{ vault_init_parsed.root_token }}"
url: http://{{ ansible_default_ipv4.address }}:8200
retries: 4
run_once: true
delegate_to: localhost
when: vault_init_parsed.root_token is defined
register: nomad_token_data
- name: Gather nomad token
ansible.builtin.set_fact:
nomad_vault_token: "{{ nomad_token_data.login.auth.client_token }}"
when: nomad_token_data.login is defined
2023-10-29 14:35:11 +00:00
- name: Hashicorp stack
hosts: all
vars:
unseal_keys_dir_output: ~/vaultunseal
roles:
2023-08-26 15:30:41 +00:00
- role: ansible-consul
become: true
- role: ansible-nomad
become: true
- role: docker
become: true