---
- name: create vault secret file and scope into ansible-runtime
  block:
    - ansible.builtin.stat:
        path: "{{ sources_dest }}/secrets/{{ item }}.yml"
      register: vault_secret
      loop:
        - vault_password

    - ansible.builtin.template:
        src: "secrets.yml.j2"
        dest: "{{ sources_dest }}/secrets/{{ item.item }}.yml"
        mode: "0600"
      loop: "{{ vault_secret.results }}"
      loop_control:
        label: "{{ item.item }}"

    - include_vars: "{{ sources_dest }}/secrets/{{ item.item }}.yml"
      loop: "{{ vault_secret.results }}"
      no_log: true