goethite / hashivault_vars Goto Github PK

I have ansible_connection set in group_vars/all.yml. At least in my setup hashivault_vars is executed before host_group_vars. Therefore, ansible_connection is not set yet when hashivault_vars is run, which leads to the wrong protocol being used.

I, personally, do not need to be able to have different secrets depending on the protocol. I would be happy with /secret/ansible/hosts/hosta.example.com. Anyway, any ideas on how to solve this? I do not want to set ansible_connection in Vault. I only would like to keep secrets there.

Hi.. @easybe and @gbevan ..
we found this repository with good project and we are trying to implement on our virtual environment

we are using right now ansible-5.2
installed hashivault_vars 0.2.0 without any errors using pip
ansible 5.2 in this case use python 3.8

we recreate this path on vault for test

/secret/ansible/groups/all

inside a simple var for example:

testvar = '123abc'

vault kv get secret/ansible/groups/all
======= Metadata =======
Key                Value
---                -----
created_time       2022-02-15T14:55:53.343017959Z
custom_metadata    <nil>
deletion_time      n/a
destroyed          false
version            1

===== Data =====
Key        Value
---        -----
testvar    123abc

and on playbook test can't found this var

- name: Lookup hashicorp vault secrets
  hosts: localhost
  gather_facts: false
  connection: local
  vars:

  tasks:
    - name: Debug
      ansible.builtin.debug:
        msg: "{{ testvar }}"

output:

TASK [Debug test 3] *****************************************************************************************************************************************************************************
fatal: [localhost]: FAILED! =>
  msg: |-
    The task includes an option with an undefined variable. The error was: 'testvar' is undefined