community.general.revbitspss (8.5.0) — lookup

Get secrets from RevBits PAM server

| "added in version" 4.1.0 of community.general"

Authors: RevBits (@RevBits) <info@revbits.com>

Install collection

Install with ansible-galaxy collection install community.general:==8.5.0


Add to requirements.yml

  collections:
    - name: community.general
      version: 8.5.0

Description

Uses the revbits_ansible Python SDK to get Secrets from RevBits PAM Server using API key authentication with the REST API.


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- hosts: localhost
  vars:
      secret: >-
        {{
            lookup(
                'community.general.revbitspss',
                'UUIDPAM', 'DB_PASS',
                base_url='https://server-url-here',
                api_key='API_KEY_GOES_HERE'
            )
        }}
  tasks:
      - ansible.builtin.debug:
          msg: >
            UUIDPAM is {{ (secret['UUIDPAM']) }} and DB_PASS is {{ (secret['DB_PASS']) }}

Inputs

    
_terms:
    description:
    - This will be an array of keys for secrets which you want to fetch from RevBits PAM.
    elements: string
    required: true
    type: list

api_key:
    description:
    - This will be the API key for authentication. You can get it from the RevBits PAM
      secret manager module.
    required: true
    type: string

base_url:
    description:
    - This will be the base URL of the server, for example V(https://server-url-here).
    required: true
    type: string

Outputs

_list:
  description:
  - The JSON responses which you can access with defined keys.
  - If you are fetching secrets named as UUID, PASSWORD it will gives you the dict
    of all secrets.
  elements: dict
  type: list