kubespray/roles/vault/tasks/cluster/role_auth_cert.yml

---

- include: ../shared/cert_auth_mount.yml
  when: inventory_hostname == groups.vault|first

- include: ../shared/auth_backend.yml
  vars:
    auth_backend_description: A Cert-based Auth primarily for services needing to issue certificates
    auth_backend_name: cert
    auth_backend_type: cert
  when: inventory_hostname == groups.vault|first

- include: ../shared/config_ca.yml
  vars:
    ca_name: auth-ca
    mount_name: auth-pki
  when: inventory_hostname == groups.vault|first

- include: create_roles.yml