mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-23 03:45:03 -02:30
Adding the Vault role
This commit is contained in:
25
roles/vault/tasks/cluster/docker.yml
Normal file
25
roles/vault/tasks/cluster/docker.yml
Normal file
@@ -0,0 +1,25 @@
|
||||
---
|
||||
|
||||
- name: docker | Check on state of docker instance
|
||||
command: "docker inspect {{ vault_container_name }}"
|
||||
ignore_errors: true
|
||||
register: vault_container_inspect
|
||||
|
||||
- name: docker | Set fact on container status
|
||||
set_fact:
|
||||
vault_container_inspect_json: "{{ vault_container_inspect.stdout|from_json }}"
|
||||
when: vault_container_inspect|succeeded
|
||||
|
||||
# Not sure if State.Running is the best check here...
|
||||
- name: docker | Remove old container if it's not currently running
|
||||
command: "docker rm {{ vault_container_name }}"
|
||||
when: vault_container_inspect|succeeded and not vault_container_inspect_json[0]["State"]["Running"]|bool
|
||||
|
||||
- name: docker | Start a new Vault instance
|
||||
command: >
|
||||
docker run -d --cap-add=IPC_LOCK --name {{vault_container_name}} -p {{vault_port}}:{{vault_port}}
|
||||
-e 'VAULT_LOCAL_CONFIG={{ vault_config|to_json }}'
|
||||
-v /etc/vault:/etc/vault
|
||||
{{vault_image_repo}}:{{vault_version}} server
|
||||
register: vault_docker_start
|
||||
when: vault_container_inspect|failed or not vault_container_inspect_json[0]["State"]["Running"]|bool
|
||||
Reference in New Issue
Block a user