---
- name: test
  hosts: localhost
  become: true
  tasks:
  - name: Create data encryption key
    shell: head -c 32 /dev/urandom | base64
    register: enc_key
  - name: Generate the encryption file
    template:
      src: templates/encryption-config.j2
      dest: /var/tmp/kubernetes/encryption-config.yaml