From 940ea5efb2c08eb424e8ea52d0b22c7f3c9660f9 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 29 Jan 2018 14:51:15 -0600
Subject: [PATCH] domain-controller: Load secrets from vault

If a file exists at `vault/samba-dc/{{ krb5_realm }}`, it will be loaded
before applying the tasks to deploy a Samba domain controller. This can
be used, for example, to set the credentials for adding a new domain
controller to an existing domain.
---
 domain-controller.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/domain-controller.yml b/domain-controller.yml
index e7657a1..cd482c9 100644
--- a/domain-controller.yml
+++ b/domain-controller.yml
@@ -1,2 +1,7 @@
+- hosts: samba-dc
+  tasks:
+  - name: load domain secrets
+    include_vars: '{{ item }}'
+    with_fileglob: vault/samba-dc/{{ krb5_realm }}
 - import_playbook: samba-dc.yml
 - import_playbook: named-server.yml