When configuring a system with code, it is possible to use a credential that “belongs” to another org.
- name: cicd-awx-ping
job_type: run
inventory: inv-cicd_test
project: 'DEV/TEST ansible-awx'
playbook: ping.yml
organization: cicd
execution_environment: 'Automation Hub Default execution environment'
verbosity: '0'
credentials:
- "DevOps-awx_credential"
state: present
- name: DevOps-awx_credential
description: local service account user
credential_type: Machine
organization: DevOps
inputs:
username: "svc.awx.admin"
ssh_key_data: "{{ lookup('file','...........') }}"
state: present
Templates should not be able to use credentials from another Organisation.