Adding the Vault role

roles/vault/tasks/bootstrap/gen_etcd_node_certs.yml

@@ -0,0 +1,29 @@
+---
+
+- name: bootstrap/gen_etcd_node_certs | Add the etcd role
+  uri:
+    url: "http://{{ groups.vault|first }}:{{ vault_temp_port }}/v1/pki/roles/etcd"
+    headers: "{{ hostvars[groups.vault|first]['vault_headers'] }}"
+    method: POST
+    body_format: json
+    body:
+      allow_any_name: true
+    status_code: 204
+  when: inventory_hostname == groups["k8s-cluster"]|first
+
+- include: ../gen_cert.yml
+  vars:
+    gen_cert_alt_names: "{{ groups['k8s-cluster'] | union(groups.etcd) | join(',') }},localhost"
+    gen_cert_copy_ca: "{{ true if item == vault_etcd_node_certs_needed|first else false }}"
+    gen_cert_hosts: "{{ groups['k8s-cluster'] | union(groups.etcd) }}"
+    gen_cert_ip_sans: >-
+        {%- for host in groups["k8s-cluster"] | union(groups.etcd) -%}
+        {{ hostvars[host]["ansible_default_ipv4"]["address"] }}
+        {%- if not loop.last -%},{%- endif -%}
+        {%- endfor -%}
+        ,127.0.0.1,::1
+    gen_cert_path: "{{ item }}"
+    gen_cert_vault_headers: "{{ hostvars[groups.vault|first]['vault_headers'] }}"
+    gen_cert_vault_role: etcd
+    gen_cert_vault_url: "http://{{ groups.vault|first }}:{{ vault_temp_port }}"
+  with_items: "{{ vault_etcd_node_certs_needed|default([]) }}"