- name: Get dns names
      set_fact:
        __ec2_dns_names: "{{ __ec2_dns_names | default([]) + [ item ] }}" 
      loop: "{{ __aws_ec2_vault_instances | to_json | from_json | community.general.json_query('sort_by(instances, &tags.Name)[].private_dns_name') }}" 
      changed_when: false

    - name: Add hosts to group 'vault'
      ansible.builtin.add_host:
        name: "vault-{{ ansible_loop.index }}.lavka.tld"
        groups: vault
        ansible_host: "{{ item }}" 
        ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o ProxyCommand="ssh -W %h:%p -q #$ .Rsc `Jumphost.base.User` $#@#$ .Rsc `Jumphost.base.Host` $# -i ~/.ssh/robot-cloud-prime.pem" -i vault.key.pem'
      loop: "{{ __ec2_dns_names }}" 
      loop_control:
        extended: true
      changed_when: false