Add vault

ansible/group_vars/all/variables.yml

@@ -2,6 +2,7 @@ hashicorp:
   daemons:
     - consul
     - nomad
+    - vault
   tools:
     terraform: 0.12.26
     consul-template: 0.25.0

ansible/templates/vault.hcl.j2

@@ -0,0 +1,23 @@
+{% raw -%}
+
+ui              = true
+disable_mlock   = true
+
+# (eth1 - default network)
+
+# (docker0)
+listener "tcp" {
+  address       = "172.17.0.1:8200"
+  tls_disable   = 1
+}
+# (eth0)
+listener "tcp" {
+  address       = "10.0.2.15:8200"
+  tls_disable   = 1
+}
+# (eth1)
+listener "tcp" {
+  address       = "10.0.3.10:8200"
+  tls_disable   = 1
+}
+{%- endraw %}

ansible/templates/vault.service.j2

@@ -0,0 +1,15 @@
+[Unit]
+Description=vault agent
+Requisite=consul.service
+After=consul.service
+
+[Service]
+Restart=on-failure
+ExecStartPre=/bin/sleep 25
+ExecStart=/usr/local/bin/vault server -dev -dev-root-token-id=root -config=/etc/vault.d/config.hcl
+ExecReload=/bin/kill -HUP $MAINPID
+KillSignal=SIGINT
+LimitMEMLOCK=infinity
+
+[Install]
+WantedBy=multi-user.target

test/Vagrantfile

@@ -7,6 +7,8 @@ Vagrant.configure("2") do |config|
     config.vm.network "forwarded_port", guest: 8500, host: 8500, host_ip: "127.0.0.1"
     # Hashicorp nomad ui
     config.vm.network "forwarded_port", guest: 4646, host: 4646, host_ip: "127.0.0.1"
+    # Hashicorp vault ui
+    config.vm.network "forwarded_port", guest: 8200, host: 8200, host_ip: "127.0.0.1"
 
     config.vm.provider "virtualbox" do |vb|
         vb.memory = 2048

test/ansible/playbook.yml

@@ -10,6 +10,14 @@
       until: result.status == 200
       retries: 60
       delay: 3
+    - name: Wait for vault to be available
+      uri:
+        url: http://127.0.0.1:8200/ui/
+        status_code: 200
+      register: result
+      until: result.status == 200
+      retries: 60
+      delay: 3
 
     - name: Terraform
       terraform: