Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow vault credentials in the inventory source because ansible-inventory supports prompting. #15315

Open
5 of 9 tasks
PulsatingQuasar opened this issue Jul 1, 2024 · 0 comments

Comments

@PulsatingQuasar
Copy link

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX is open source software provided for free and that I might not receive a timely response.

Feature type

Enhancement to Existing Feature

Feature Summary

Using an inventory source with an inventory plugin that uses a *.yml for it's configuration works nice but if it requires a password, it should be a vault encrypted string.

Using a vault encrypted string in the yml config works quite nicely with ansible-inventory. I have no issues with it on the command-line.

When I want to use a vault credential in AWX in an inventory source I can not do that. Only custom credentials can be used.

I read in this GitHub issue that you can get it to work with a custom credential but it is pretty much a work around and could be used with a vault credential if ansible-inventory would support vault password prompting:

#223 "Vault passwords are (currently) passed in AWX by prompting via pexpect"

ansible-inventory does support prompting( now) so could this option be added now?

Select the relevant components

  • UI
  • API
  • Docs
  • Collection
  • CLI
  • Other

Steps to reproduce

Configure a vault credential
Create an inventory config
Add an inventory source to the inventory config with source "Sourced from a project"

Try to add a vault credential in the Credentials field. ( You can not)

Current results

A vault credential can't be used in the inventory source config.

Sugested feature result

A vault credential can be selected which will then be used for the inventory plugin config *.yml file to decrypt the vault string.

Additional information

Info about the ansible-inventory prompting

#223

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants