ansible-vault

ansible-vault copied to clipboard

Create Systemd unit in directory /etc/systemd/system/ when 'vault_install_hashi_repo' is False. Currently, the following task overwrites the vault.service Systemd unit installed via the 'vault_install_hashi_repo'-based package manager. The Systemd documentation available [here](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/using_systemd_unit_files_to_customize_and_optimize_your_system/assembly_working-with-systemd-unit-files_working-with-systemd#proc_modifying-existing-unit-files_assembly_working-with-systemd-unit-files)...

ron1

Only create directory 'vault_run_path' when 'vault_install_hashi_repo' is false. Currently, the following task creates directory 'vault_run_path' needlessly when 'vault_run_path' is false since a 'vault_install_hashi_repo'-based install does not use 'vault_run_path". https://github.com/ansible-community/ansible-vault/blob/7e2fdeddec3405756aae10f1dedcace4ba94779b/tasks/main.yml#L109

ron1

Only Enable non-root mlock capability if variable 'vault_disable_mlock' is true. Currently, the following two tasks are executed needlessly when 'vault_disable_mock' is true. https://github.com/ansible-community/ansible-vault/blob/7e2fdeddec3405756aae10f1dedcace4ba94779b/tasks/main.yml#L78 https://github.com/ansible-community/ansible-vault/blob/7e2fdeddec3405756aae10f1dedcace4ba94779b/tasks/main.yml#L85 This is related to issue: https://github.com/ansible-community/ansible-vault/issues/287.

ron1

Only create directory 'vault_log_path' when 'vault_enable_log' is true. Currently, the following task creates directory 'vault_log_path' needlessly when 'vault_log_path' is false. https://github.com/ansible-community/ansible-vault/blob/7e2fdeddec3405756aae10f1dedcace4ba94779b/tasks/main.yml#L107

ron1

# Feature request : allow additional environment variables Add the possibility to set custom environment variables on the systemd service.

thomas-VIGINUM