ansible / ansible.builtin / v2.8.13 / lookup / onepassword fetch field values from 1Password | "added in version" 2.6 of ansible.builtin" Authors: Scott Buchanan (@scottsb), Andrew Zenk (@azenk), Sam Doran (@samdoran) preview | supported by communityansible.builtin.onepassword (v2.8.13) — lookup
pip
Install with pip install ansible==2.8.13
C(onepassword) wraps the C(op) command line utility to fetch specific field values from 1Password.
# These examples only work when already signed in to 1Password - name: Retrieve password for KITT when already signed in to 1Password debug: var: lookup('onepassword', 'KITT')
- name: Retrieve password for Wintermute when already signed in to 1Password debug: var: lookup('onepassword', 'Tessier-Ashpool', section='Wintermute')
- name: Retrieve username for HAL when already signed in to 1Password debug: var: lookup('onepassword', 'HAL 9000', field='username', vault='Discovery')
- name: Retrieve password for HAL when not signed in to 1Password debug: var: lookup('onepassword' 'HAL 9000' subdomain='Discovery' master_password=vault_master_password)
- name: Retrieve password for HAL when never signed in to 1Password debug: var: lookup('onepassword' 'HAL 9000' subdomain='Discovery' master_password=vault_master_password username='tweety@acme.com' secret_key=vault_secret_key)
field: default: password description: field to return from each matching item (case-insensitive). vault: default: None description: Vault containing the item to retrieve (case-insensitive). If absent will search all vaults. _terms: description: identifier(s) (UUID, name, or subdomain; case-insensitive) of item(s) to retrieve. required: true section: default: None description: Item section containing the field to retrieve (case-insensitive). If absent will return first match from any section. username: description: The username used to sign in. version_added: '2.7' version_added_collection: ansible.builtin subdomain: default: None description: The 1Password subdomain to authenticate against. version_added: '2.7' version_added_collection: ansible.builtin secret_key: description: The secret key used when performing an initial sign in. version_added: '2.7' version_added_collection: ansible.builtin master_password: aliases: - vault_password default: None description: The password used to unlock the specified vault. version_added: '2.7' version_added_collection: ansible.builtin
_raw: description: field data requested