redhat-cop / vault-config-operator

An operator to support Haschicorp Vault configuration workflows from within Kubernetes
Apache License 2.0
112 stars 49 forks source link

Ansible Automation Platform Support #253

Closed regicsolutions closed 2 weeks ago

regicsolutions commented 2 weeks ago

Introduce Ansible compatibility by supporting the following CRDs given ansible supports HashiCorp Vault via the hashi_vault_collection

AnsibleSecretEngineConfig CRD allows a user to create a Ansible Secret engine configuration.

AnsibleSecretEngineRole CRD allows a user to create a Ansible Secret engine role. A role allows to create a project scoped secret.

erlisb commented 2 weeks ago

I am not sure if there is currently an ansible secret engine supported by HashiCorp Vault. Here you can see a list of secret engines: https://developer.hashicorp.com/vault/docs

What are you referring seems more like the use case of a custom secret engine for ansible: https://developer.hashicorp.com/vault/tutorials/custom-secrets-engine

Did I understood your use case correctly ?

Thanks.

regicsolutions commented 2 weeks ago

@erlisb I thought a AnsibleEngine was available. Thanks for the links!