ansible-vault

ansible-vault copied to clipboard

templates: backend raft: resolve to proper interface

6

This `for` loop is looping through all (remaining) hosts from group - but it's using `vault_iface` value of current host. I believe that's part of the issue with #211 There's...

jimnydev

Fix enterprise install

5

Hashicorp renamed its enterprise pkgs to `+ent.hsm` and `+ent` (https://releases.hashicorp.com/vault/) this PR adjusts the role accordingly Furthermore: * actually download the checksum file from hashicorp CDN * allow enterprise installation...

FalcoSuessgott

There's no need for get_url/shell/stat/etc. tasks when you can simply use a url lookup for fetching the package checksum.

gardar

akerouanton

integrate simple vault transit auto-unseal support

4

This allows to configure a Vault Transit Auto-Unseal as documented in - [https://www.vaultproject.io/docs/configuration/seal/transit](https://www.vaultproject.io/docs/configuration/seal/transit) - [https://learn.hashicorp.com/tutorials/vault/autounseal-transit](https://learn.hashicorp.com/tutorials/vault/autounseal-transit)

kbucheli

I'm just starting to get up to speed on Nomad, Consul, and Vault and one thing I noticed missing here was the ability to set custom configuration values. This would...

ViViDboarder

New TLS certificates should reload/restart vault to make it use them. fixes #271

kbucheli

Recursively set TLS permissions

6

When `vault_tls_config_path` already exists and `vault_tls_copy_keys` is set to `false`, only the certificates root folder (`vault_tls_config_path`) get the correct permission while the certificates inside aren't touched.

ilpianista

vault daemon not reloaded when SSL cert changes

1

# Actual behaviour When I changed the TLS certificate of the the vault server, it did not automatically reload the vault daemon and thus failed the health check as it...

kbucheli

Rename role to distinguish from ansible vault

1

Suggestion to rename this role to distinguish it from ansible vault. The name: `ansible-community.ansible-vault` really makes it look like it's related to [ansible vault](https://docs.ansible.com/ansible/latest/user_guide/vault.html) rather than hashicorp vault / vaultproject....

gardar