Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EDA Credential Objects #570

Open
3 tasks done
Bri2785 opened this issue Aug 9, 2023 · 0 comments
Open
3 tasks done

EDA Credential Objects #570

Bri2785 opened this issue Aug 9, 2023 · 0 comments

Comments

@Bri2785
Copy link

Bri2785 commented Aug 9, 2023

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that ansible-rulebook is open source software provided for free and that I might not receive a timely response.

Feature type

New Feature

Feature Summary

In the current version of AAP, we have credential objects to leverage to pass in sensitive values to the playbook. In EDA, when leveraging the webhook plugin (and possibly others), securing this endpoint currently requires a plain text token committed to the code base. A credential object being available that was injected at runtime would alleviate this.

Steps to reproduce

Create a rulebook using any source plugin requiring a sensitive parameter

hosts: localhost
sources:
  - ansible.eda.webhook:
      host: 0.0.0.0
      port: 5000
      token: MySecretToken

Current results

The parameter needs to be committed in plain text

Sugested feature result

The ability to inject the sensitive value at runtime

hosts: localhost
sources:
  - ansible.eda.webhook:
      host: 0.0.0.0
      port: 5000
      token: {{ token }} 

Additional information

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant