various: Fix issues related to vault reloads

Author: the-maldridge

ansible/roles/vault/tasks/main.yml

@@ -4,11 +4,19 @@
     pkg: vault
     state: present
 
+- name: Enforce ownership on /etc/vault
+  file:
+    path: /etc/vault
+    state: directory
+    owner: _vault
+    group: _vault
+    mode: 0750
+
 - name: Install Storage config
   template:
     src: 25-storage.hcl.j2
     dest: /etc/vault/25-storage.hcl
-    owner: root
+    owner: _vault
     group: _vault
     mode: 0640
   notify:
@@ -18,7 +26,7 @@
   copy:
     src: 30-listeners.hcl
     dest: /etc/vault/30-listeners.hcl
-    owner: root
+    owner: _vault
     group: _vault
     mode: 0640
   notify:

terraform/hashistack/.terraform.lock.hcl

@@ -8,7 +8,7 @@ module "consul_base" {
 
 module "vault_base" {
   source  = "resinstack/base/vault"
-  version = "0.1.1"
+  version = "0.1.2"
 }
 
 module "nomad_base" {

terraform/hashistack/base.tf

@@ -1,2 +1,3 @@
 provider "consul" {}
 provider "vault" {}
+provider "nomad" {}

terraform/hashistack/providers.tf

@@ -6,7 +6,11 @@ terraform {
     }
     vault = {
       source  = "hashicorp/vault"
-      version = "~> 2.14.0"
+      version = "~> 2.23.0"
+    }
+    nomad = {
+      source  = "hashicorp/nomad"
+      version = "~> 1.4.15"
     }
   }
 }