From aa6de065253af3cfb663e69c852d1cb09c3a3905 Mon Sep 17 00:00:00 2001
From: Alex Fomenko <a.fomenko@angarasecurity.ru>
Date: Wed, 15 Jan 2025 12:50:14 +0300
Subject: [PATCH] feat: use infisicalsdk

---
 plugins/lookup/read_secrets.py | 42 ++++++++++++----------------------
 1 file changed, 15 insertions(+), 27 deletions(-)

diff --git a/plugins/lookup/read_secrets.py b/plugins/lookup/read_secrets.py
index 96ff1e9..9b6d64a 100644
--- a/plugins/lookup/read_secrets.py
+++ b/plugins/lookup/read_secrets.py
@@ -3,7 +3,7 @@ from ansible.plugins.lookup import LookupBase
 
 HAS_INFISICAL = False
 try:
-    from infisical_client import InfisicalClient, ClientSettings, GetSecretOptions, ListSecretsOptions
+    from infisical_sdk import InfisicalSDKClient
     HAS_INFISICAL = True
 except ImportError as e:
     HAS_INFISICAL = False
@@ -77,7 +77,7 @@ class LookupModule(LookupBase):
         self.set_options(var_options=variables, direct=kwargs)
 
         if not HAS_INFISICAL:
-          raise AnsibleError("Please pip install infisical-python to use the infisical_vault lookup module.")
+          raise AnsibleError("Please pip install infisicalsdk to use the infisical_vault lookup module.")
 
         machine_identity_client_id = self.get_option("universal_auth_client_id")
         machine_identity_client_secret = self.get_option("universal_auth_client_secret")
@@ -87,18 +87,10 @@ class LookupModule(LookupBase):
         if not machine_identity_client_id or not machine_identity_client_secret:
             raise AnsibleError("Please provide the universal_auth_client_id and universal_auth_client_secret")
 
-
-
-
-        # Create the client settings
-        settings = ClientSettings(
-            client_id=machine_identity_client_id,
-            client_secret=machine_identity_client_secret,
-            site_url=url
-        )
-
         # Initialize the Infisical client
-        client = InfisicalClient(settings=settings)
+        client = InfisicalSDKClient(host=url)
+        client.auth.universal_auth.login(client_id=machine_identity_client_id,
+                                         client_secret=machine_identity_client_secret)
 
         secretName = kwargs.get('secret_name')
         envSlug = kwargs.get('env_slug')
@@ -112,31 +104,27 @@ class LookupModule(LookupBase):
 
     def get_single_secret(self, client, project_id,  secret_name, environment, path):
         try:
-            
-            options = GetSecretOptions(
-                environment=environment,
-                project_id=project_id,
+            secret = client.secrets.get_secret_by_name(
                 secret_name=secret_name,
-                path=path,
-                type="shared"
+                project_id=project_id,
+                environment_slug=environment,
+                secret_path=path,
             )
 
-            secret = client.getSecret(options=options)
-            return [{"value": secret.secret_value, "key": secret.secret_key}]
+            return [[{"value": secret.secretValue, "key": secret.secretKey}]]
         except Exception as e:
-            print(e)
             raise AnsibleError(f"Error fetching single secret {e}")
 
     def get_all_secrets(self, client, project_id, environment="dev", path="/"):
         try:
-            options = ListSecretsOptions(
-                environment=environment,
+            secrets = client.secrets.list_secrets(
                 project_id=project_id,
-                path=path,
+                environment_slug=environment,
+                secret_path=path,
+                tag_filters=tags
             )
-            secrets = client.listSecrets(options=options)
 
-            return [{"value": s.secret_value, "key": s.secret_key} for s in secrets]
+            return [[{"value": s.secretValue, "key": s.secretKey} for s in secrets.secrets]]
         except Exception as e:
             raise AnsibleError(f"Error fetching all secrets {e}")