c12s-kubespray/roles/vault/tasks/shared/auth_backend.yml

---
- name: shared/auth_backend | Enable auth backend {{ auth_backend_path }}
  hashivault_auth_enable:
    url: "{{ vault_leader_url }}"
    token: "{{ vault_root_token }}"
    ca_cert: "{{ vault_cert_dir }}/ca.pem"
    name: "{{ auth_backend_type }}"
    mount_point: "{{ auth_backend_path }}"
    description: "{{ auth_backend_description|d('') }}"
  register: result
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`---`
refactor vault role (#2733) * Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size 2018-05-11 16:11:38 +00:00			`- name: shared/auth_backend \| Enable auth backend {{ auth_backend_path }}`
			`hashivault_auth_enable:`
			`url: "{{ vault_leader_url }}"`
			`token: "{{ vault_root_token }}"`
			`ca_cert: "{{ vault_cert_dir }}/ca.pem"`
			`name: "{{ auth_backend_type }}"`
			`mount_point: "{{ auth_backend_path }}"`
			`description: "{{ auth_backend_description\|d('') }}"`
			`register: result`