Update to 2022-08-31 13:00

roles/vault/tasks/install.yml

@@ -0,0 +1,67 @@
+---
+
+- name: Install needed tools
+  package:
+    name:
+      - tar
+      - zstd
+      - unzip
+  tags: vault
+
+- when: vault_install_mode != 'none'
+  block:
+    - name: Download vault
+      get_url:
+        url: "{{ vault_archive_url }}"
+        dest: "{{ vault_root_dir }}/tmp"
+        checksum: sha256:{{ vault_archive_sha256 }}
+
+    - name: Extract the archive
+      unarchive:
+        src: "{{ vault_root_dir }}/tmp/vault_{{ vault_version }}_linux_amd64.zip"
+        dest: "{{ vault_root_dir }}/tmp"
+        remote_src: True
+
+    - name: Install vault binary
+      copy:
+        src: "{{ vault_root_dir }}/tmp/vault"
+        dest: "{{ vault_root_dir }}/bin/vault"
+        remote_src: True
+        mode: 755
+
+    - name: Link in /usr/local/bin
+      file: src={{ vault_root_dir }}/bin/vault dest=/usr/local/bin/vault state=link force=True
+
+  tags: vault
+
+- name: Install bash completion support
+  copy:
+    content: |
+      complete -C {{ vault_root_dir }}/bin/vault vault
+    dest: /etc/bash_completion.d/vault
+    mode: 755
+  tags: vault
+
+- name: Deploy systemd service unit
+  template: src=vault.service.j2 dest=/etc/systemd/system/vault.service
+  register: vault_unit
+  notify: restart vault
+  tags: vault
+
+- name: Reload systemd
+  systemd: daemon_reload=True
+  when: vault_unit.changed
+  tags: vault
+
+- name: Install dehydrated hook
+  template: src=dehydrated_hook.j2 dest=/etc/dehydrated/hooks_deploy_cert.d/vault mode=755
+  tags: vault
+
+- name: Install profile script
+  copy:
+    content: |
+      #!/bin/sh
+      export VAULT_ADDR={{ vault_conf.api_addr }}
+    dest: /etc/profile.d/vault.sh
+    mode: 0755
+  tags: vault