ansible-collections / ansible-collections/google.cloud

Add lookup plugin for Google Secret Manager

Open
#460 3 comments 33 reactions 0 assignees View on GitHub
stale
Dominant language
Python
Stars
105
Forks
144
Avg merge
5d 10h
Merged PRs (30d)
4

Description

##### SUMMARY
Add in a lookup plugin to retrieve secrets from [Google Secret Manager](https://cloud.google.com/secret-manager). [Similar to the one for AWS](https://docs.ansible.com/ansible/latest/collections/amazon/aws/aws_secret_lookup.html).

##### ISSUE TYPE
- Feature Idea

##### COMPONENT NAME

Maybe something like `google.cloud.gcp_secret`?

##### ADDITIONAL INFORMATION

A Lookup plugin would be a very convenient and more secure way to store passwords in Google Secret Manager and retrieve them easily in Ansible.

```yaml
"{{ lookup('google.cloud.gcp_secret', 'app-password', on_missing='skip')}}"
```

Contributor guide

Open the contributing guide

Research direction

Start by studying the AWS secret lookup plugin linked in the issue and the google.cloud collection's existing lookup-plugin structure. Define the lookup entry point and Google Secret Manager interaction, then verify the documented example retrieves app-password and that on_missing='skip' behaves as requested.

Written by the indexing model from the issue text.

Assessment

Tech stack
google-cloud, python
Domain
cloud, devops
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.