ansible-collections/infisical.vault
1
0
Fork 0
mirror of https://github.com/Infisical/ansible-collection.git synced 2025-08-11 16:44:29 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'main' into feat/use_infisicalsdk

Browse source
This commit is contained in:
Фоменко Алексей 2025-01-31 12:44:28 +03:00
commit ca12198b8b
1 changed files with 30 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

41
plugins/lookup/read_secrets.py
View file

@ -80,25 +80,31 @@ vars:
# [{ "key": "HOST", "value": "google.com" }] # [{ "key": "HOST", "value": "google.com" }]
""" """
class LookupModule(LookupBase): class LookupModule(LookupBase):
def run(self, terms, variables=None, **kwargs): def run(self, terms, variables=None, **kwargs):
self.set_options(var_options=variables, direct=kwargs) self.set_options(var_options=variables, direct=kwargs)
if not HAS_INFISICAL: if not HAS_INFISICAL:
raise AnsibleError("Please pip install infisicalsdk to use the infisical_vault lookup module.") raise AnsibleError(
"Please pip install infisicalsdk to use the infisical_vault lookup module.")
machine_identity_client_id = self.get_option("universal_auth_client_id") machine_identity_client_id = self.get_option(
machine_identity_client_secret = self.get_option("universal_auth_client_secret") "universal_auth_client_id")
machine_identity_client_secret = self.get_option(
"universal_auth_client_secret")
url = self.get_option("url") url = self.get_option("url")
# Check if the required environment variables are set # Check if the required environment variables are set
if not machine_identity_client_id or not machine_identity_client_secret: if not machine_identity_client_id or not machine_identity_client_secret:
raise AnsibleError("Please provide the universal_auth_client_id and universal_auth_client_secret") raise AnsibleError(
"Please provide the universal_auth_client_id and universal_auth_client_secret")
# Initialize the Infisical client # Initialize the Infisical client
client = InfisicalSDKClient(host=url) client = InfisicalSDKClient(host=url)
client.auth.universal_auth.login(client_id=machine_identity_client_id, client.auth.universal_auth.login(
client_secret=machine_identity_client_secret) client_id=machine_identity_client_id,
client_secret=machine_identity_client_secret
)
secretName = kwargs.get('secret_name') secretName = kwargs.get('secret_name')
envSlug = kwargs.get('env_slug') envSlug = kwargs.get('env_slug')
@ -107,20 +113,33 @@ class LookupModule(LookupBase):
tags = kwargs.get('tags') tags = kwargs.get('tags')
if secretName: if secretName:
return self.get_single_secret(client, project_id, secretName, envSlug, path) return self.get_single_secret(
client,
project_id,
secretName,
envSlug,
path
)
else: else:
return self.get_all_secrets(client, project_id, envSlug, path, tags) return self.get_all_secrets(client, project_id, envSlug, path, tags)
def get_single_secret(self, client, project_id, secret_name, environment, path): def get_single_secret(
self,
client,
project_id,
secret_name,
environment,
path
):
try: try:
secret = client.secrets.get_secret_by_name( secret = client.secrets.get_secret_by_name(
secret_name=secret_name, secret_name=secret_name,
project_id=project_id, project_id=project_id,
environment_slug=environment, environment_slug=environment,
secret_path=path, secret_path=path
) )
return [[{"value": secret.secretValue, "key": secret.secretKey}]] return [{"value": secret.secretValue, "key": secret.secretKey}]
except Exception as e: except Exception as e:
raise AnsibleError(f"Error fetching single secret {e}") raise AnsibleError(f"Error fetching single secret {e}")