search

chrisdola / hashivault_jwt_credential_plugin

0 stars 0 forks source link

Feasibility of using the credential plugin only for secrets access within the playbook? #4

Open sofixa opened 2 hours ago

sofixa commented 2 hours ago

Can this be used only for secrets within the playbook itself, providing a Vault token to https://docs.ansible.com/ansible/latest/collections/community/hashi_vault/index.html ?

chrisdola commented 2 hours ago

Yes, that's correct. A role-specific Credential Type is created which provides the name of the vault role required by the playbooks. Templates then refer to that credential which exposes the wrapped token as a variable to the playbook. That can be unwrapped and used with the hashi_vault lookup plugin or via the API directly.