mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-06-02 22:39:09 -07:00
[PR #7308/35b252c9 backport][stable-7] allow specifying a 1Password account ID (#7328)
allow specifying a 1Password account ID (#7308)
* allow specifying a 1p account ID
* add 'version_added' field
Co-authored-by: Felix Fontein <felix@fontein.de>
* fix spacing
Co-authored-by: Felix Fontein <felix@fontein.de>
* add changelog fragment
* update onepassword_raw
* Remove periods.
---------
Co-authored-by: Felix Fontein <felix@fontein.de>
(cherry picked from commit 35b252c9ad
)
Co-authored-by: Ilya Trushchenko <i@whitehat.com.ua>
This commit is contained in:
parent
b862c0db49
commit
1a0c9eb5e6
3 changed files with 51 additions and 7 deletions
|
@ -35,6 +35,10 @@ DOCUMENTATION = '''
|
|||
version_added: 6.0.0
|
||||
default: '1password.com'
|
||||
type: str
|
||||
account_id:
|
||||
description: The account ID to target.
|
||||
type: str
|
||||
version_added: 7.5.0
|
||||
username:
|
||||
description: The username used to sign in.
|
||||
secret_key:
|
||||
|
@ -52,6 +56,7 @@ DOCUMENTATION = '''
|
|||
performed an initial sign in (meaning C(~/.op/config exists)), then only the O(master_password) is required.
|
||||
You may optionally specify O(subdomain) in this scenario, otherwise the last used subdomain will be used by C(op).
|
||||
- This lookup can perform an initial login by providing O(subdomain), O(username), O(secret_key), and O(master_password).
|
||||
- Can target a specific account by providing the O(account_id).
|
||||
- Due to the B(very) sensitive nature of these credentials, it is B(highly) recommended that you only pass in the minimal credentials
|
||||
needed at any given time. Also, store these credentials in an Ansible Vault using a key that is equal to or greater in strength
|
||||
to the 1Password master password.
|
||||
|
@ -96,8 +101,9 @@ class LookupModule(LookupBase):
|
|||
secret_key = self.get_option("secret_key")
|
||||
master_password = self.get_option("master_password")
|
||||
service_account_token = self.get_option("service_account_token")
|
||||
account_id = self.get_option("account_id")
|
||||
|
||||
op = OnePass(subdomain, domain, username, secret_key, master_password, service_account_token)
|
||||
op = OnePass(subdomain, domain, username, secret_key, master_password, service_account_token, account_id)
|
||||
op.assert_logged_in()
|
||||
|
||||
values = []
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue