mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
1a13287788
* add sops lookup plugin * fix pylint * fix undefined encrypted_file variable * decode sops output as text by default * add variable to control decrypted content print in logs * use Sops class decryption method * lookup should return text, use appropriate ansible facility * use ansible.module_utils._text.to_native As required by Ansible documentation on [raising errors][raising-errors] from plugins, use to_native to wrap errors to ensure string compatibility between Python versions. [raising-errors]: https://docs.ansible.com/ansible/latest/dev_guide/developing_plugins.html#id3 * use with_items instead of with_file in sops lookup documentation [with_file][with-file], per Ansible documentation, returns the content of the file. As sops is not able to decrypt a string by itself but requires the file is passed as argument, passing the content breaks the lookup plugin as reported by [here][bug-report]. [with_items][with-items] should be used instead. [with-file]: https://docs.ansible.com/ansible/2.4/playbooks_loops.html#looping-over-files [with-items]: https://docs.ansible.com/ansible/2.4/playbooks_loops.html#standard-loops [bug-report]: https://github.com/ansible/ansible/pull/59639#issuecomment-540803722 * uniform sops exception handling between plugins * Apply suggestions from code review Co-Authored-By: Felix Fontein <felix@fontein.de> * remove sops lookup plugin print option Is no longer possible to print the decrypted secrets directly from this plugin, but `debug` module can be used instead. * add github handle to author * add setup_sops integration target * extract sops module * add lookup_sops integration tests * use sops module * Update plugins/module_utils/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/module_utils/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/lookup/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/module_utils/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/module_utils/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update test/integration/targets/lookup_sops/tasks/ubuntu.yml Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/module_utils/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update test/integration/targets/lookup_sops/files/simple.sops.yaml Co-authored-by: Felix Fontein <felix@fontein.de> * Adding aliases file * Emtpy spaces * Update plugins/lookup/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/lookup/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/lookup/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update test/integration/targets/lookup_sops/tasks/ubuntu.yml Co-authored-by: Felix Fontein <felix@fontein.de> * Update plugins/lookup/sops.py Co-authored-by: Felix Fontein <felix@fontein.de> * Update test/integration/targets/lookup_sops/tasks/ubuntu.yml Co-authored-by: Felix Fontein <felix@fontein.de> * Update test/integration/targets/lookup_sops/tasks/ubuntu.yml Co-authored-by: Felix Fontein <felix@fontein.de> * gpg -> gnupg2 * with_items -> loop * Move error logic to module_utils. * Make Sops.decrypt() also handle errors and decode output. * Improve error handling. * Improve example formatting. * Reorganize tests. * Add test. * Remove version_added. Co-authored-by: Edoardo Tenani <edoardo.tenani@protonmail.com> Co-authored-by: Edoardo Tenani <edoardo.tenani@gmail.com> Co-authored-by: Edoardo T <endorama@users.noreply.github.com> Co-authored-by: Felix Fontein <felix@fontein.de>
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
---
|
|
- when: sops_installed
|
|
block:
|
|
|
|
- name: Test lookup with missing file
|
|
set_fact:
|
|
sops_file_does_not_exists: "{{ lookup('community.general.sops', 'file-does-not-exists.sops.yml') }}"
|
|
ignore_errors: yes
|
|
register: sops_lookup_missing_file
|
|
|
|
- assert:
|
|
that:
|
|
- "sops_lookup_missing_file is failed"
|
|
- "'could not locate file in lookup: file-does-not-exists.sops.yml' in sops_lookup_missing_file.msg"
|
|
|
|
- name: Test lookup of non-sops file
|
|
set_fact:
|
|
sops_wrong_file: "{{ lookup('community.general.sops', 'wrong.yaml') }}"
|
|
ignore_errors: yes
|
|
register: sops_lookup_wrong_file
|
|
|
|
- assert:
|
|
that:
|
|
- "sops_lookup_wrong_file is failed"
|
|
- "'sops metadata not found' in sops_lookup_wrong_file.msg"
|
|
|
|
- name: Test simple lookup
|
|
set_fact:
|
|
sops_success: "{{ lookup('community.general.sops', 'simple.sops.yaml') }}"
|
|
ignore_errors: yes
|
|
register: sops_lookup_simple
|
|
|
|
- assert:
|
|
that:
|
|
- "sops_lookup_simple is success"
|
|
- "sops_success == 'foo: bar'"
|