Support for AWS IAM and Azure auth methods in HashiCorp Vault Secret Lookup credential type

ansible / awx

AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.

Other

14.01k stars 3.42k forks source link

Support for AWS IAM and Azure auth methods in HashiCorp Vault Secret Lookup credential type #10142

Open jghal opened 3 years ago

jghal commented 3 years ago

ISSUE TYPE

Feature Idea

SUMMARY

HashiCorp Vault provides authentication methods supporting both AWS and Azure instance identities (AWS IAM and Azure MSI)

It would be really great for the credential type to support these authentication methods natively.

BeryJu commented 3 years ago

To add to that, seeing as AWX now requires K8s, it would make sense to also support the kubernetes auth method: https://www.vaultproject.io/docs/auth/kubernetes

liortamari commented 2 years ago

kubernetes auth method: https://github.com/ansible/awx/pull/11787

ilijamt commented 1 year ago

Here is an attempt to implement the Vault Auth https://github.com/ansible/awx/pull/13298