External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-17 11:10:03 -03:30
Code Issues Packages Projects Releases Wiki Activity

Add missing filtering mechanism for the Thycotic Devops Vault credential lookup

Browse Source
This commit is contained in:
Steffen Scheib
2023-03-20 13:43:12 +01:00
committed by Hao Liu
parent e42461d96f
commit 0f4bac7aed
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
awx/main/credential_plugins/dsv.py
View File

@@ -35,8 +35,14 @@ dsv_inputs = {
'type': 'string', 'type': 'string',
'help_text': _('The secret path e.g. /test/secret1'), 'help_text': _('The secret path e.g. /test/secret1'),
}, },
{
'id': 'secret_field',
'label': _('Secret Field'),
'help_text': _('The field to extract from the secret'),
'type': 'string',
},
], ],
'required': ['tenant', 'client_id', 'client_secret', 'path'], 'required': ['tenant', 'client_id', 'client_secret', 'path', 'secret_field'],
} }
if settings.DEBUG: if settings.DEBUG:
@@ -52,5 +58,5 @@ if settings.DEBUG:
dsv_plugin = CredentialPlugin( dsv_plugin = CredentialPlugin(
'Thycotic DevOps Secrets Vault', 'Thycotic DevOps Secrets Vault',
dsv_inputs, dsv_inputs,
lambda **kwargs: SecretsVault(**{k: v for (k, v) in kwargs.items() if k in [field['id'] for field in dsv_inputs['fields']]}).get_secret(kwargs['path']), lambda **kwargs: SecretsVault(**{k: v for (k, v) in kwargs.items() if k in [field['id'] for field in dsv_inputs['fields']]}).get_secret(kwargs['path'])['data'][kwargs['secret_field']],
) )