feat(user/secrets/hcv): add HC Vault task

Signed-off-by: Matej Focko <me@mfocko.xyz>

roles/user/secrets/hcv/tasks/install_AlmaLinux.yml

@@ -0,0 +1 @@
+install_el.yml

roles/user/secrets/hcv/tasks/install_CentOS.yml

@@ -0,0 +1 @@
+install_el.yml

roles/user/secrets/hcv/tasks/install_Fedora.yml

@@ -0,0 +1,6 @@
+---
+- name: Enable HashiCorp repository
+  ansible.builtin.get_url:
+    url: https://rpm.releases.hashicorp.com/fedora/hashicorp.repo
+    dest: /etc/yum.repos.d/hashicorp.repo
+    mode: 0640

roles/user/secrets/hcv/tasks/install_Ubuntu.yml

@@ -0,0 +1,11 @@
+---
+- name: Add HashiCorp GPG Key
+  ansible.builtin.get_url:
+    url: https://apt.releases.hashicorp.com/gpg
+    dest: /etc/apt/keyrings/hashicorp.asc
+    mode: 0640
+
+- name: Add HashiCorp repository
+  ansible.builtin.apt_repository:
+    repo: "deb [signed-by=/etc/apt/keyrings/hashicorp.gpg] https://apt.releases.hashicorp.com {{ ansible_distribution_release }} main"
+    state: present

roles/user/secrets/hcv/tasks/install_el.yml

@@ -0,0 +1,6 @@
+---
+- name: Enable HashiCorp repository
+  ansible.builtin.get_url:
+    url: https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
+    dest: /etc/yum.repos.d/hashicorp.repo
+    mode: 0640

roles/user/secrets/hcv/tasks/install_user.yml

@@ -0,0 +1,12 @@
+---
+- name: Download the latest release
+  ansible.builtin.unarchive:
+    src: https://releases.hashicorp.com/vault/1.14.2/vault_1.14.2_linux_amd64.zip
+    dest: ~/.local/bin/
+    remote_src: yes
+    creates: ~/.local/bin/vault
+
+- name: Make ‹vault› executable
+  ansible.builtin.file:
+    path: ~/.local/bin/vault
+    mode: u+x

roles/user/secrets/hcv/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: Install HC Vault via package manager
+  when: ansible_distribution in [ "AlmaLinux", "CentOS", "Fedora", "Ubuntu"]
+  block:
+    - name: Enable repository
+      ansible.builtin.include_tasks: "install_{{ ansible_distribution }}.yml"
+
+    - name: Install Vault
+      ansible.builtin.package:
+        name: vault
+        state: present
+      become: true
+
+- name: Install HC Vault to userspace
+  ansible.builtin.include_tasks: install_user.yml
+  when: ansible_distribution not in [ "AlmaLinux", "CentOS", "Fedora", "Ubuntu"]