# Interests in an Ansible Lookup Plugin for Thycotic Secret Server Professional **URL:** \ **Category:** Ansible Developer\ **Created:** [June 28, 2018, 1:09pm UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897 "2018-06-28T13:09:04Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![mscholl.corp](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@mscholl.corp](https://forum.ansible.com/u/mscholl.corp)\ **Post date:** [June 28, 2018, 1:09pm UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897/1 "2018-06-28T13:09:04Z")
Hi, we’re using ansible for quite some time now as well as Thycotic Secret Server (TSS). Recently, we thought it would be a good idea to be able to use TSS as a global password storage for any ansible related stuff, too. While e.g. the password lookup plugin is great we wanted to have one place that stores not only passwords but additional metadata. Thus we developed a small lookup plugin that operates on TSS Professional Rest API. Why am I telling you this? Simply put, it would be nice to contribute a little bit to ansible since it is such a handy tool. But as we are not quite a company that embraces open source style code sharing too much I just wanted to know if there is any interest of people to have such a plugin ship with ansible. If so I would first try to solve the potential copyright issues on our side and would then submit a feature proposal to [https://github.com/ansible/proposals](https://github.com/ansible/proposals). Just to show you what I’m actually talking about see these examples: ` - name: show default field debug: msg=“{{ lookup(‘tss\_lookup’, ‘/path/to/the/secret’ }}” - name: show default field and provide specific template debug: msg=“{{ lookup(‘tss\_lookup’, ‘/path/to/the/secret;template=theTemplate’ }}” - name: show specific field debug: msg=“{{ lookup(‘tss\_lookup’, ‘/path/to/the/secret;field=user name’ }}” - name: show specific field and provide specific template debug: msg=“{{ lookup(‘tss\_lookup’, ‘/path/to/the/secret;field=user name,template=theTemplate’ }}” - name: show specific field and provide specific template and parameters debug: msg=“{{ lookup(‘tss\_lookup’, ‘/path/to/the/secret;template=theTemplate,field=user pass,user name=theUser’ }}” ` Thanks for reading, cheers Martin ---
**Author:** ![Mark\_Janssen](https://avatars.discourse-cdn.com/v4/letter/m/e9c0ed/32.png) [@Mark\_Janssen](https://forum.ansible.com/u/Mark_Janssen)\ **Post date:** [July 11, 2018, 10:38am UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897/2 "2018-07-11T10:38:27Z")
I’m not familiar with that specific password management system, but I would recommend trying to keep the ansible interface compatible with other password-management systems. Like for example: [https://docs.ansible.com/ansible/2.5/plugins/lookup/passwordstore.html](https://docs.ansible.com/ansible/2.5/plugins/lookup/passwordstore.html) Looks mostly the same, but the fields are space-seperated, not semicolon seperated. Getting it into ansible took a bit of effort when I wanted to upstream passwordstore, but worked out fine in the end. ---
**Author:** ![mscholl.corp](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@mscholl.corp](https://forum.ansible.com/u/mscholl.corp)\ **Post date:** [July 26, 2018, 8:49am UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897/3 "2018-07-26T08:49:39Z")
Well, I agree. The point is that I didn’t want to implemented escape logic, didn’t find any common rules for implementing, too. TSS allows spaces in field names. ---
**Author:** ![B11](https://avatars.discourse-cdn.com/v4/letter/b/919ad9/32.png) [@B11](https://forum.ansible.com/u/B11)\ **Post date:** [May 30, 2019, 6:55pm UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897/4 "2019-05-30T18:55:45Z")
I have a customer that is looking for the integration of Thycotic Secret Server specifically within Ansible. This would be of great value if this were to be a ‘supported module’ within Ansible. This post has some dust on it from last year, is there any other traction you have found to support this effort? ---
**Author:** ![mscholl.corp](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@mscholl.corp](https://forum.ansible.com/u/mscholl.corp)\ **Post date:** [May 31, 2019, 9:56am UTC](https://forum.ansible.com/t/interests-in-an-ansible-lookup-plugin-for-thycotic-secret-server-professional/27897/5 "2019-05-31T09:56:44Z")
Hi, to be honest my efforts in convincing management to participate by sharing code/knowledge have not beared fruit yet. They just want to sell, if at all. However, management will change by the end of the year, maybe I’ll be successful then. For the time being I can tell you that such a plugin is relatively easy to implement and works great. If you need help feel free to contact me 🙂