Usage of Machine Credential (SSH-Password) from HashiCorp Vault in a Template?

Archives AWX Project
1

Hello,

I am not sure if this more a question of AWX or more a Question of HashiCorp Vault but is there a way to use Machine Credential (e.g. a SSH-Password) which are stored in HashiCorp Vault? I have seen there is a Credential Type: “HashiCorp Vault Secret Lookup” but I it’s not available in the Credential Dialog of the Template. I already found out that AWX supports HashiCorp Vault as Certification Center. Maybe this kind of credential has another goal or this is a coming feature but at least I would like to ask if someone here has feature information about it because the documentation seems for me very thin.
best regards
Dan

2

Hey Dan,

We recently added a new feature to AWX we call credential plugins. This feature makes it so that instead of typing in raw values for credential fields (like Machine SSH password), you can fetch a dynamic value from a third party source using some other credential (like a HashiCorp Vault API token).

Take a look at this doc for more details:

https://github.com/ansible/awx/blob/devel/docs/credential_plugins.md

3

Hello Ryan,

thanks for the quick and helpful response this looks exactly like what I am trying/looking for.
Thanks you
Dan