Add vault

ansible/group_vars/all/variables.yml

@@ -2,6 +2,7 @@ hashicorp:
   daemons:
     - consul
     - nomad
+    - vault
   tools:
     terraform: 0.12.26
     consul-template: 0.25.0

ansible/templates/vault.hcl.j2

@@ -0,0 +1,18 @@
+{% raw -%}
+
+ui = true
+disable_mlock = true
+
+api_addr      = "http://127.0.0.1:8200"
+cluster_addr  = "http://127.0.0.1:8201"
+
+storage "consul" {
+    address = "127.0.0.1:8500"
+    token = "b6e29626-e23d-98b4-e19f-c71a96fbdef7"
+}
+
+listener "tcp" {
+    address     = "127.0.0.1:8200"
+    tls_disable = 1
+}
+{%- endraw %}

ansible/templates/vault.service.j2

@@ -0,0 +1,13 @@
+[Unit]
+Description=vault agent
+Requisite=consul.service
+After=consul.service
+
+[Service]
+ExecStart=/usr/local/bin/vault server -dev -dev-root-token-id=root
+ExecReload=/bin/kill -HUP $MAINPID
+KillSignal=SIGINT
+LimitMEMLOCK=infinity
+
+[Install]
+WantedBy=multi-user.target

test/Vagrantfile

@@ -7,6 +7,8 @@ Vagrant.configure("2") do |config|
     config.vm.network "forwarded_port", guest: 8500, host: 8500, host_ip: "127.0.0.1"
     # Hashicorp nomad ui
     config.vm.network "forwarded_port", guest: 4646, host: 4646, host_ip: "127.0.0.1"
+    # Hashicorp vault ui
+    config.vm.network "forwarded_port", guest: 8200, host: 8200, host_ip: "127.0.0.1"
 
     config.vm.provider "virtualbox" do |vb|
         vb.memory = 2048

test/ansible/playbook.yml

@@ -10,6 +10,14 @@
       until: result.status == 200
       retries: 60
       delay: 3
+    - name: Wait for vault to be available
+      uri:
+        url: http://127.0.0.1:8200/ui/
+        status_code: 200
+      register: result
+      until: result.status == 200
+      retries: 60
+      delay: 3
 
     - name: Terraform
       terraform: