Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hashivault_kv auth_path moved from metadata to inputs #7991

Merged
merged 6 commits into from
Sep 14, 2020
Merged

hashivault_kv auth_path moved from metadata to inputs #7991

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
00fc5f6
hashivault_kv auth_path moved from metadata to inputs
Aug 25, 2020
7c8e5ac
fix tests
Aug 26, 2020
cf5d1a2
restore previous tests as we need to keep backward compatibility
Aug 27, 2020
16fdf0e
[credential_plugin/hashivault] add approle_auth_path in inputs
Aug 28, 2020
e8b54ab
[credential_plugin/hashivault] edit tests
Aug 28, 2020
08c9219
rename 'approle_auth_path' to 'default_auth_path' & fix kwargs.get
Sep 7, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 12 additions & 2 deletions awx/main/credential_plugins/hashivault.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,17 +40,25 @@
'multiline': False,
'secret': True,
'help_text': _('The Secret ID for AppRole Authentication')
}, {
'id': 'default_auth_path',
'label': _('Path to Approle Auth'),
'type': 'string',
'multiline': False,
bbayszczak marked this conversation as resolved.
Show resolved Hide resolved
'default': 'approle',
'help_text': _('The AppRole Authentication path to use if one isn\'t provided in the metadata when linking to an input field. Defaults to \'approle\'')
}
],
'metadata': [{
'id': 'secret_path',
'label': _('Path to Secret'),
'type': 'string',
'help_text': _('The path to the secret stored in the secret backend e.g, /some/secret/')
},{
}, {
'id': 'auth_path',
'label': _('Path to Auth'),
'type': 'string',
'multiline': False,
'help_text': _('The path where the Authentication method is mounted e.g, approle')
}],
'required': ['url', 'secret_path'],
Expand Down Expand Up @@ -118,7 +126,9 @@ def handle_auth(**kwargs):
def approle_auth(**kwargs):
role_id = kwargs['role_id']
secret_id = kwargs['secret_id']
auth_path = kwargs.get('auth_path') or 'approle'
# we first try to use the 'auth_path' from the metadata
# if not found we try to fetch the 'default_auth_path' from inputs
auth_path = kwargs.get('auth_path') or kwargs['default_auth_path']

url = urljoin(kwargs['url'], 'v1')
cacert = kwargs.get('cacert', None)
Expand Down
3 changes: 2 additions & 1 deletion awx_collection/test/awx/test_credential_input_source.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,8 @@ def source_cred_hashi_secret(organization):
"url": "https://secret.hash.example.com",
"token": "myApiKey",
"role_id": "role",
"secret_id": "secret"
"secret_id": "secret",
"default_auth_path": "path-to-approle"
}
)

Expand Down