ansible-collections / ansible-collections/google.cloud
Allow json content in place of a file for service_account_file
- Dominant language
- Python
- Stars
- 105
- Forks
- 144
- Avg merge
- 5d 10h
- Merged PRs (30d)
- 4
Description
##### SUMMARY
Ability to use json content instead of requiring an actual file for credentials (service_account_file). This allow us to retrieve secrets from HashiCorp Vault or other external vault services, or passing it as an input at runtime.
##### ISSUE TYPE
- Feature Idea
##### COMPONENT NAME
The applies to any modules, roles in this collection that make use of service_account_file
##### ADDITIONAL INFORMATION
A use case would be allow the key file to be stored in HC Vault or other vault like services, and retrieved at run time. This allow the key file to be updated and managed by a different team.
Another use case is running playbooks in AWX and using the Survey feature to ask user to post the json content of key. This allow us to use same playbook for different teams using different GCP projects and having different keys.
Contributor guide
Research direction
Start by locating the modules and roles in the google.cloud collection that use service_account_file, then review how they currently load credentials. Done means those entry points can accept JSON credential content as well as a file path, while retaining existing file-based behavior and covering the supported use cases with tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gcp, python
- Domain
- authentication, cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100