{% set app_vault_env_var = 'vault_' + (binary_app.name | replace('-', '_')) + '_env' %} {% set app_vault_env = lookup('vars', app_vault_env_var, default={}) %} {% set app_non_vault_env_keys = binary_app.non_vault_env_keys | default([]) %} {% set app_filtered_vault_env = app_vault_env | dict2items | rejectattr('key', 'in', app_non_vault_env_keys) | items2dict %} {% for key, value in (binary_app.env | combine(app_filtered_vault_env)) | dictsort %} {{ key }}={{ value }} {% endfor %}