kubespray/roles/vault/tasks/cluster/create_roles.yml

---

- include: ../shared/create_role.yml
  vars:
    create_role_name: "{{ item.name }}"
    create_role_group: "{{ item.group }}"
    create_role_policy_rules: "{{ item.policy_rules }}"
    create_role_options: "{{ item.role_options }}"
  with_items: "{{ vault_roles|d([]) }}"