---

- include: check_vault.yml
  when: inventory_hostname in groups.vault

# bootstrap.yml's sole purpose is to ensure certs exist for Vault and Etcd
# prior to startup, so TLS can be enabled.
- include: bootstrap/main.yml
  when: vault_bootstrap|bool

# cluster.yml should only run after the backend service is ready (default etcd)
- include: cluster/main.yml
  when: not vault_bootstrap|bool