From 92327ba11f50ecd61ff3a302e98f6ee809d2de07 Mon Sep 17 00:00:00 2001 From: Scott Cunningham Date: Thu, 30 Jul 2015 21:24:11 +0100 Subject: [PATCH] add credstash lookup plugin docs --- docsite/rst/playbooks_lookups.rst | 36 +++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/docsite/rst/playbooks_lookups.rst b/docsite/rst/playbooks_lookups.rst index a7d459c800..386230873c 100644 --- a/docsite/rst/playbooks_lookups.rst +++ b/docsite/rst/playbooks_lookups.rst @@ -140,6 +140,42 @@ default empty string return value if the key is not in the csv file .. note:: The default delimiter is TAB, *not* comma. +.. _credstash_lookup: + +The Credstash Lookup +```````````````````` + +Credstash is a small utility for managing secrets using AWS's KMS and DynamoDB: https://github.com/LuminalOSS/credstash + +First, you need to store your secrets with credstash:: + + + $ credstash put my-github-password secure123 + + my-github-password has been stored + + +Example usage:: + + + --- + - name: "Test credstash lookup plugin -- get my github password" + debug: msg="Credstash lookup! {{ lookup('credstash', 'my-github-password') }}" + + +You can specify regions or tables to fetch secrets from:: + + + --- + - name: "Test credstash lookup plugin -- get my other password from us-west-1" + debug: msg="Credstash lookup! {{ lookup('credstash', 'my-other-password', region='us-west-1') }}" + + + - name: "Test credstash lookup plugin -- get the company's github password" + debug: msg="Credstash lookup! {{ lookup('credstash', 'company-github-password', table='company-passwords') }}" + + + .. _more_lookups: More Lookups