diff --git a/tools/docker-compose/ansible/roles/vault/tasks/initialize.yml b/tools/docker-compose/ansible/roles/vault/tasks/initialize.yml index 68a9de7119..2576376133 100644 --- a/tools/docker-compose/ansible/roles/vault/tasks/initialize.yml +++ b/tools/docker-compose/ansible/roles/vault/tasks/initialize.yml @@ -1,15 +1,11 @@ --- -- name: See if vault has been initialized - ansible.builtin.stat: - path: "{{ vault_file }}" - register: vault_secret_file_info - - block: - name: Start the vault community.docker.docker_compose: state: present services: vault project_src: "{{ sources_dest }}" + register: vault_start - name: Run the initialization community.docker.docker_container_exec: @@ -18,6 +14,7 @@ env: VAULT_ADDR: "http://127.0.0.1:1234" register: vault_initialization + ignore_errors: true - name: Write out initialization file copy: @@ -30,6 +27,7 @@ {{ vault_initialization.stdout_lines[4] | regex_replace('Unseal Key ', 'Unseal_Key_') }} {{ vault_initialization.stdout_lines[6] | regex_replace('Initial Root Token', 'Initial_Root_Token') }} dest: "{{ vault_file }}" + when: (vault_initialization.stdout_lines | length) > 0 - name: Unlock the vault include_role: @@ -58,5 +56,4 @@ community.docker.docker_compose: state: absent project_src: "{{ sources_dest }}" - - when: not vault_secret_file_info.stat.exists + when: vault_start is defined and vault_start.changed