---
- name: debug
  debug:
    msg: "{{ lookup('hashi_vault', 'secret=pki_int/masked.name') }}"

- name: ensure docker registry dir
  file:
    path: "{{ docker_registry_mnt }}"
    state: directory
    owner: root
    group: root
    mode: 0755

- name: ensure python-docker is installed
  apt:
    name: python3-docker
    state: present

- name: run docker registry
  docker_container:
    name: registry
    image: registry:2
    ports:
      - "5000:5000"
    volumes:
      - "{{ docker_registry_mnt }}:/var/lib/registry"
    restart_policy: always
...