Adding the Vault role

roles/vault/tasks/config_ca.yml

@@ -0,0 +1,19 @@
+---
+
+- name: config_ca | Read root CA cert for Vault
+  command: cat /etc/vault/ssl/ca.pem
+  register: vault_ca_cert_cat
+
+- name: config_ca | Read root CA key for Vault
+  command: cat /etc/vault/ssl/ca-key.pem
+  register: vault_ca_key_cat
+
+- name: config_ca | Configure pki mount to use the found root CA cert and key
+  uri:
+    url: "{{ vault_url }}/v1/pki/config/ca"
+    headers: "{{ vault_headers }}"
+    method: POST
+    body_format: json
+    body:
+      pem_bundle: "{{ vault_ca_cert_cat.stdout + '\n' + vault_ca_key_cat.stdout }}"
+    status_code: 204