create_databases_vault.yml

---
- name: Create databases vault
  hosts: local
  gather_facts: false

  tasks:
    - name: Display playbook name
      ansible.builtin.debug: msg="==== Starting create_databases_vault playbook ===="

    - name: Set vars
      ansible.builtin.import_tasks: tasks/set_vars.yml

    - name: Set databases vault destination path
      ansible.builtin.set_fact:
        databases_vault_path: "group_vars/customer/{{ customer }}/{{ env_type }}/secrets/databases.vault.yml"

    - name: Check databases vault file
      ansible.builtin.stat:
        path: "{{ databases_vault_path }}"
      register: databases_vault

    - name: Import databases vault
      ansible.builtin.include_vars:
        file: "{{ databases_vault.stat.path }}"
      when: databases_vault.stat.exists

    - name: Run tasks for apps
      ansible.builtin.include_tasks: tasks/run_tasks_for_apps.yml
      vars:
        tasks:
          - tasks/create_app_database_vault

    - name: Save databases vault
      ansible.builtin.template:
        src: "templates/databases.vault.yml.j2"
        dest: "{{ databases_vault_path }}"
        mode: 0644
      when: databases is defined

    - name: Encrypt databases vault
      ansible.builtin.command: ansible-vault encrypt {{ databases_vault_path }}
      when: databases is defined