c12s-kubespray/roles/vault/tasks/cluster/binary.yml

---

- name: cluster/binary | Copy vault binary from downloaddir
  copy:
    src: "{{ local_release_dir }}/vault/vault"
    dest: "{{ bin_dir }}/vault"
    remote_src: true
    mode: "0755"
    owner: vault
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`---`

			`- name: cluster/binary \| Copy vault binary from downloaddir`
			`copy:`
			`src: "{{ local_release_dir }}/vault/vault"`
refactor vault role (#2733) * Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size 2018-05-11 16:11:38 +00:00			`dest: "{{ bin_dir }}/vault"`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`remote_src: true`
			`mode: "0755"`
			`owner: vault`