Patrick de Ruiter
22d78bf85c
All checks were successful
Code Quality & Security Scan / TFLint (push) Successful in 24s
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 30s
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 44s
Code Quality & Security Scan / Terraform Validate (push) Successful in 43s
Code Quality & Security Scan / SonarQube Trigger (push) Successful in 47s
- Remove ansible/ from .gitignore - Add vault_agent role (copied from terraform-vsphere-infra) - Add vault_agent-playbook.yml for deployment - Include ansible collections (cloud.terraform, ansible.posix, etc.) - Archive consul_template role as consul_template-legacy The ansible directory contains the vault-agent deployment automation that replaces the legacy consul-template approach.
20 lines
495 B
YAML
20 lines
495 B
YAML
---
|
|
##################################################
|
|
# Vault Agent Certificate Deployment Playbook #
|
|
# #
|
|
# Deploys Vault Agent with AppRole auth for #
|
|
# automated certificate retrieval from Vault #
|
|
##################################################
|
|
|
|
- name: Deploy Vault Agent for Certificate Management
|
|
hosts: vault_agent
|
|
become: true
|
|
|
|
vars:
|
|
arch_mapping:
|
|
x86_64: amd64
|
|
aarch64: arm64
|
|
|
|
roles:
|
|
- vault_agent
|