|
36 | 36 | ansible.builtin.import_role:
|
37 | 37 | name: stackhpc.hashicorp.openbao
|
38 | 38 | vars:
|
39 |
| - openbao_config_dir: "/opt/kayobe/vault" |
| 39 | + openbao_api_addr: "http://127.0.0.1:8200" |
| 40 | + openbao_config_dir: "/opt/kayobe/openbao" |
40 | 41 | openbao_cluster_name: "kayobe-automation"
|
41 | 42 | copy_self_signed_ca: false
|
42 | 43 | openbao_write_keys_file: true
|
43 |
| - openbao_write_keys_file_path: "{{ kayobe_env_config_path }}/vault/kayobe-automation-keys.json" |
| 44 | + openbao_write_keys_file_path: "{{ kayobe_env_config_path }}/openbao/kayobe-automation-keys.json" |
44 | 45 |
|
45 | 46 | - name: Include OpenBao keys
|
46 | 47 | ansible.builtin.include_vars:
|
47 |
| - file: "{{ kayobe_env_config_path }}/vault/kayobe-automation-keys.json" |
| 48 | + file: "{{ kayobe_env_config_path }}/openbao/kayobe-automation-keys.json" |
48 | 49 | name: openbao_keys
|
49 | 50 | tags: always
|
50 | 51 |
|
51 | 52 | - name: Import Vault unseal role
|
52 | 53 | ansible.builtin.import_role:
|
53 | 54 | name: stackhpc.hashicorp.vault_unseal
|
54 | 55 | vars:
|
55 |
| - vault_api_addr: "{{ openbao_api_addr }}" |
| 56 | + vault_api_addr: "http://{{ openbao_api_addr }}" |
56 | 57 | vault_unseal_token: "{{ openbao_keys.root_token }}"
|
57 | 58 | vault_unseal_keys: "{{ openbao_keys.keys_base64 }}"
|
58 | 59 | vault_unseal_verify: false
|
|
63 | 64 | ansible.legacy.hashivault_secret_engine:
|
64 | 65 | name: kayobe-automation
|
65 | 66 | backend: kv
|
66 |
| - url: "{{ openbao_api_addr }}" |
| 67 | + url: "http://{{ openbao_api_addr }}" |
67 | 68 | token: "{{ openbao_keys.root_token }}"
|
68 | 69 |
|
69 | 70 | - name: Ensure secret store is present
|
70 | 71 | community.hashi_vault.vault_write:
|
71 |
| - url: "{{ openbao_api_addr }}" |
| 72 | + url: "http://{{ openbao_api_addr }}" |
72 | 73 | token: "{{ openbao_keys.root_token }}"
|
73 | 74 | path: kayobe-automation/{{ kayobe_environment }}
|
74 | 75 | data:
|
|
0 commit comments