Matthew Mosesohn 07cc981971 refactor vault role (#2733) ... * Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size		2018-05-11 19:11:38 +03:00
..
docker.service.j2	refactor vault role (#2733)	2018-05-11 19:11:38 +03:00
host.service.j2	Vault security hardening and role isolation	2017-02-08 21:41:36 +00:00
http-proxy.conf.j2	improved proxy support	2017-10-30 11:42:14 -04:00
rkt.service.j2	refactor vault role (#2733)	2018-05-11 19:11:38 +03:00