Merge branch 'master' into openbao-raft-ha-support

Author: jackhodgkiss

roles/openbao/README.md

@@ -39,6 +39,7 @@ Role variables
     * `openbao_write_keys_file_host`: Host on which to write root token and unseal keys. Default `localhost`
     * `openbao_write_keys_file_path`: Path of file to write root token and unseal keys. Default `bao-keys.json`
     * `openbao_raft_leaders`: List of IPs belonging to Raft leaders. Expected that the first and only entry is the IP address of the first OpenBao instance as this would be initialised whereas as the others will not.
+    * `openbao_enable_ui`: Whether to enable user interface that could be accessed from the `openbao_api_addr`. Default `false` 
 
 Root and unseal keys
 --------------------

roles/openbao/defaults/main.yml

@@ -26,10 +26,12 @@ openbao_cluster_port: 8201
 
 openbao_raft_leaders: []
 
+openbao_enable_ui: false
+
 openbao_config: >
   {
     "cluster_name": "{{ openbao_cluster_name }}",
-    "ui": false,
+    "ui": "{{ openbao_enable_ui }}",
     "api_addr": "{{ openbao_api_addr }}",
     "cluster_addr": "{{ openbao_protocol }}://{{ openbao_cluster_addr }}",
     "listener": [{

roles/openbao/tasks/openbao.yml

@@ -12,6 +12,7 @@
     restart_policy: "always"
     env:
       BAO_LOCAL_CONFIG: "{{ openbao_config | to_json }}"
+      BAO_ADDR: "{{ openbao_api_addr }}"
     command: >
       server
   become: true