conjur_variable - Fetch credentials from CyberArk Conjur.
New in version 2.5.
Synopsis
- Retrieves credentials from Conjur using the controlling host’s Conjur identity. Conjur info: https://www.conjur.org/.
Requirements
The below requirements are needed on the local master node that executes this lookup.
- The controlling host running Ansible has a Conjur identity. (More: https://developer.conjur.net/key_concepts/machine_identity.html)
Parameters
| Parameter | Choices/Defaults | Configuration | Comments |
|---|---|---|---|
| _term
required
|
Variable path
|
||
| config_file | Default:
/etc/conjur.conf
|
ini entries:
[conjur, ]
env:CONJUR_CONFIG_FILE
|
Path to the Conjur configuration file. The configuration file is a YAML file.
|
| identity_file | Default:
/etc/conjur.identity
|
ini entries:
[conjur, ]
env:CONJUR_IDENTITY_FILE
|
Path to the Conjur identity file. The identity file follows the netrc file format convention.
|
Examples
- debug
msg: {{ lookup('conjur_variable', '/path/to/secret') }}
Return Values
Common return values are documented here, the following are the fields unique to this lookup:
| Key | Returned | Description |
|---|---|---|
| _raw |
Value stored in Conjur.
|
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
Author
- UNKNOWN
Hint
If you notice any issues in this documentation you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.5/plugins/lookup/conjur_variable.html