hcp-ansible/playbooks/tasks/vault/vault_vars.yml

---
# hashistack configuration merging for vault
- name: "Vault | Merge listener configuration"
  ansible.builtin.set_fact:
    vault_listener_configuration: "{{
      vault_listener_configuration |
      combine((vault_enable_tls | bool) | ternary(vault_tls_listener_configuration, {}), recursive=True) |
      combine(vault_extra_listener_configuration | default({}), recursive=True)
      }}"

- name: "Vault | Merge service registration configuration"
  vars:
    _config_to_merge:
      service_registration: "{{ vault_service_registration_configuration }}"
  ansible.builtin.set_fact:
    hashicorp_vault_configuration: "{{
      hashicorp_vault_configuration |
      combine(_config_to_merge)
      }}"
  when: vault_enable_service_registration

- name: "Vault | Merge plugins configuration"
  vars:
    _config_to_merge:
      plugin_directory: "{{ vault_plugin_directory }}"
  ansible.builtin.set_fact:
    hashicorp_vault_configuration: "{{
      hashicorp_vault_configuration |
      combine(_config_to_merge)
      }}"
  when: vault_enable_plugins

- name: "Vault | Merge logging configuration"
  vars:
    _config_to_merge: "{{ vault_logging_configuration }}"
  ansible.builtin.set_fact:
    hashicorp_vault_configuration: "{{
      hashicorp_vault_configuration |
      combine(_config_to_merge)
      }}"
  when: vault_enable_log_to_file

- name: "Vault | Merge extra configuration settings"
  vars:
    _config_to_merge: "{{ vault_extra_configuration }}"
  ansible.builtin.set_fact:
    hashicorp_vault_configuration: "{{
      hashicorp_vault_configuration |
      combine(_config_to_merge)
      }}"
  when: vault_extra_configuration is defined