pid_file = "{{ vault_agent_pid_file }}"

auto_auth {
  method {
    type = "approle"
    config = {
      role_id_file_path   = "{{ vault_role_id_file }}"
      secret_id_file_path = "{{ vault_secret_id_file }}"
      remove_secret_id_file_after_reading = false 
    }
  }
  sink {
    type = "file"
    config = {
      path = "/etc/vault-token"
    }
  }
}

{% for tpl in vault_agent_templates if tpl.service == hostvars[inventory_hostname].service %}
template {
  source      = "{{ vault_templates_dir }}/{{ tpl.src }}"
  destination = "{{ tpl.dest }}"
  perms       = "0644"
}
{% endfor %}

vault {
  address = "{{ vault_addr }}"
}