new files from source

Infrastrucutre as Code/Ansible/roles/secure_vault/vault_agent/templates/vault-agent-config.hcl.j2

@@ -0,0 +1,30 @@
+pid_file = "{{ vault_agent_pid_file }}"
+
+auto_auth {
+  method {
+    type = "approle"
+    config = {
+      role_id_file_path   = "{{ vault_role_id_file }}"
+      secret_id_file_path = "{{ vault_secret_id_file }}"
+      remove_secret_id_file_after_reading = false 
+    }
+  }
+  sink {
+    type = "file"
+    config = {
+      path = "/etc/vault-token"
+    }
+  }
+}
+
+{% for tpl in vault_agent_templates if tpl.service == hostvars[inventory_hostname].service %}
+template {
+  source      = "{{ vault_templates_dir }}/{{ tpl.src }}"
+  destination = "{{ tpl.dest }}"
+  perms       = "0644"
+}
+{% endfor %}
+
+vault {
+  address = "{{ vault_addr }}"
+}

Infrastrucutre as Code/Ansible/roles/secure_vault/vault_agent/templates/vault-agent.service.j2

@@ -0,0 +1,13 @@
+[Unit]
+Description=Vault Agent
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+ExecStart=/usr/bin/vault agent -config={{ vault_agent_config_path }}
+Restart=always
+RestartSec=5
+User={{ vault_agent_user }}
+
+[Install]
+WantedBy=multi-user.target