snel.kubernetes-cluster/roles/talos_config_create/tasks/create_secrets.yml

---

- name: Create secrets file for Talos
  delegate_to: "{{ talosctl_host }}"
  when: "'talos_first_nodes' in group_names"
  ansible.builtin.command:
    cmd: >-
      talosctl  gen  secrets
        --output-file '{{ talos_cluster_secrets_file }}'      
    creates: "{{ talos_cluster_secrets_file }}"
  notify: Encrypt secrets