roles/ensure-vault/tasks/main.yaml

- name: Add APT signing key
  become: true
  ansible.builtin.apt_key:
    url: https://apt.releases.hashicorp.com/gpg

- name: Add APT repository
  become: true
  ansible.builtin.apt_repository:
    repo: deb [arch=amd64] https://apt.releases.hashicorp.com {{ ansible_distribution_release }} main

- name: Install Vault
  become: true
  ansible.builtin.apt:
    name: vault

- name: Assert that Vault is functional
  ansible.builtin.command: vault version