add k8s auth to lookup hashi_vault - operator #220
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Docs Build 📝Thank you for contribution!✨ The docs for this PR have been published here: You can compare to the docs for the The docsite for this PR is also available for download as an artifact from this run: File changes:
Click to see the diff comparison.NOTE: only file modifications are shown here. New and deleted files are excluded. diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/hashi_vault_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/hashi_vault_lookup.html
index fd75dce..3790c9d 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/hashi_vault_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/hashi_vault_lookup.html
@@ -185,6 +185,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -355,6 +356,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-hashi-vault-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-hashi-vault-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-hashi-vault-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv1_get_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv1_get_lookup.html
index 34d5aa9..6def43f 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv1_get_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv1_get_lookup.html
@@ -207,6 +207,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -389,6 +390,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv1_get_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv1_get_module.html
index 796a7b1..fe14ed1 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv1_get_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv1_get_module.html
@@ -186,6 +186,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -274,6 +275,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv1-get-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv2_get_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv2_get_lookup.html
index f2ddbc2..716e193 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv2_get_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv2_get_lookup.html
@@ -207,6 +207,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -390,6 +391,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv2_get_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv2_get_module.html
index 642813d..21c945d 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_kv2_get_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_kv2_get_module.html
@@ -186,6 +186,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -274,6 +275,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-kv2-get-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_login_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_login_lookup.html
index 04edf9a..ad5d4e8 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_login_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_login_lookup.html
@@ -207,6 +207,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -377,6 +378,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_login_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_login_module.html
index 1f69429..2ac3f8e 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_login_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_login_module.html
@@ -187,6 +187,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -267,6 +268,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-login-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_pki_generate_certificate_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_pki_generate_certificate_module.html
index c127e46..08b58d0 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_pki_generate_certificate_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_pki_generate_certificate_module.html
@@ -195,6 +195,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -328,6 +329,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-pki-generate-certificate-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-pki-generate-certificate-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-pki-generate-certificate-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_read_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_read_lookup.html
index b52a83d..3176925 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_read_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_read_lookup.html
@@ -206,6 +206,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -376,6 +377,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_read_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_read_module.html
index 0ea89b5..e0ded3c 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_read_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_read_module.html
@@ -186,6 +186,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -266,6 +267,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-read-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_token_create_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_token_create_lookup.html
index 2ae9f92..aba6e2a 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_token_create_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_token_create_lookup.html
@@ -207,6 +207,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -411,6 +412,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-meta"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-lookup-parameter-meta"><strong>meta</strong></p>
<a class="ansibleOptionLink" href="#parameter-meta" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_token_create_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_token_create_module.html
index f2cd728..67b2706 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_token_create_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_token_create_module.html
@@ -187,6 +187,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -301,6 +302,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-meta"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-token-create-module-parameter-meta"><strong>meta</strong></p>
<a class="ansibleOptionLink" href="#parameter-meta" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_write_lookup.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_write_lookup.html
index 11ca99c..9a9e70b 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_write_lookup.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_write_lookup.html
@@ -207,6 +207,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
@@ -385,6 +386,39 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-lookup-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul class="simple">
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-lookup-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+<p class="ansible-option-line"><span class="ansible-option-configuration">Configuration:</span></p>
+<ul>
+<li><p>INI entry:</p>
+<div class="highlight-YAML+Jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">[</span><span class="nv">hashi_vault_collection</span><span class="p p-Indicator">]</span><span class="w"></span>
+<span class="l l-Scalar l-Scalar-Plain">kubernetes_token_path = /var/run/secrets/kubernetes.io/serviceaccount/token</span><span class="w"></span>
+</pre></div>
+</div>
+</li>
+<li><p>Environment variable: ANSIBLE_HASHI_VAULT_KUBERNETES_TOKEN_PATH</p></li>
+<li><p>Variable: ansible_hashi_vault_kubernetes_token_path</p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-lookup-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
diff --git a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_write_module.html b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_write_module.html
index 862fbb8..71397ba 100644
--- a/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/base/collections/community/hashi_vault/vault_write_module.html
+++ b/home/runner/work/community.hashi_vault/community.hashi_vault/docsbuild/head/collections/community/hashi_vault/vault_write_module.html
@@ -187,6 +187,7 @@ To check whether it is installed, run <code class="code docutils literal notrans
<li><p><span class="ansible-option-choices-entry">aws_iam</span></p></li>
<li><p><span class="ansible-option-choices-entry">jwt</span></p></li>
<li><p><span class="ansible-option-choices-entry">cert</span></p></li>
+<li><p><span class="ansible-option-choices-entry">kubernetes</span></p></li>
<li><p><span class="ansible-option-choices-entry">none</span></p></li>
</ul>
</div></td>
@@ -275,6 +276,23 @@ To check whether it is installed, run <code class="code docutils literal notrans
</div></td>
</tr>
<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-module-parameter-kubernetes-token"><strong>kubernetes_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Kubernetes Token (JWT) to use for Kubernetes authentication to Vault.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-kubernetes_token_path"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-module-parameter-kubernetes-token-path"><strong>kubernetes_token_path</strong></p>
+<a class="ansibleOptionLink" href="#parameter-kubernetes_token_path" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in 2.5.0 of community.hashi_vault</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If no kubernetes_token is specified, will try to read the token from this path.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <span class="ansible-option-default">“/var/run/secrets/kubernetes.io/serviceaccount/token”</span></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
<div class="ansibleOptionAnchor" id="parameter-mount_point"></div><p class="ansible-option-title" id="ansible-collections-community-hashi-vault-vault-write-module-parameter-mount-point"><strong>mount_point</strong></p>
<a class="ansibleOptionLink" href="#parameter-mount_point" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
</div></td>
|
briantist
reviewed
Feb 13, 2022
There was a problem hiding this comment.
Hi @chris93111 ! Welcome and thanks for submitting!
I've put some inline comments in.
One of them suggestes changing the name of the auth method to kubernetes, since this is a more descriptive name, and it matches what the method is called in Vault's documentation.
Beyond that, the main thing missing is tests. Auth methods in this collection are shared by all plugins and modules (including ones that don't exist yet), so we really need them to be well tested. The other auth methods have unit tests and integration tests that cover both controller and target execution. There should be a lot to go on in the existing ones.
If you haven't seen it already, we do have a contributor guide with a section on adding auth methods:
https://docs.ansible.com/ansible/devel/collections/community/hashi_vault/docsite/contributor_guide.html#contributing-auth-methods
(suggestions for improving this guide are welcome too!)
I will also help out with testing and such where I can, but I can't guarantee when I'll be able to do so.
Thanks again and let me know if you have any questions.
Co-authored-by: Brian Scholer <[email protected]>
|
@briantist can you please relaunch the CI and tell me if correction is ok ? they are error Node_error on last try I can write test, but how i can mount minikube in the ci ? Tests can't work without |
Sure I've launched the CI for the latest commit but canceled the queued runs for the other commits. New contributors need approval to run on every push. I strongly recommend getting set up to run the tests locally. All the tests we run in CI are able to be run on a local machine, and there's instructions in the contributor guide, it will really make turnaround time a lot faster for you. If you have any trouble getting set up, let me know. I don't have much left in me this weekend to take a deeper look at this yet, but I will as soon as I get more free time.
Forgive me for being unfamiliar with minikube but from the looks of it, it's something we could possibly spin up as part of the integration tests. We already have Vault, tinyproxy, and MMock running, each in their own containers. From what little I cold gather, minikube is not really designed to run in a container. But we could launch it separately, as long as we ensure it works in both local and CI environments. Looking around a bit, it seems like k3d (https://docs.ansible.com/ansible/devel/collections/community/hashi_vault/docsite/contributor_guide.html#mocking-integrations) might be better for this purpose? It looks to be designed to run in a container itself, so this would be even easier to run maybe. To add a new piece of software like this, you'll want to look at the localenv developer guide, and at the current docker-based localenv that we use to spin up the current set of containers. But there is an easier option too, we can mock the integration with MMock. We already do this for other things that weren't so easy to set up (AWS auth and LDAP auth). You can see the mmock configs here: And if you run this locally, you'll be able to connect to MMock's console port in your web browser and get a real-time view of requests which can help tune it. I can help with that if you have the server response from running the real command against a Vault server (with everything sensitive redacted/replaced). The basic idea is that the integration tests point at MMock, and MMock is set up to proxy those requests to the test Vault server, unless there's a config for the request that matches a given path (or other criteria), and for those requests, we can return a mock response. Integration tests aside, you can start writing unit tests right away, which can cover a lot of corner cases more easily than integration tests can, and they will not/can not talk to any external services. Grabbing a real response as described above is useful for unit tests as well as MMock, you can see the other ones we have here: And we use these as mock returns in the unit tests as well. Hopefully there's plenty here that you can get started on, even if I can't put a lot of deep time into this just yet, I will try my best to answer questions and keep you moving along! |
briantist
reviewed
Feb 16, 2022
Co-authored-by: Brian Scholer <[email protected]>
Co-authored-by: Brian Scholer <[email protected]>
|
Hi @briantist can you please review this before i try to work with CI |
briantist
reviewed
Mar 4, 2022
|
A change was made in core a few hours ago that will cause sanity test failures (unrelated to your PR). I have a PR up to address those changes: With that merged, please rebase to ensure sanity passes. |
|
@briantist i thinks it's ok ? |
|
Looks like you've got one sanity nit in there, I recommend setting your editor to trim trailing whitespace, insert final newline (single), and trim final newlines (these are roughly the names of the settings in vscode, not sure what they are called in other editors). Also again, running tests locally will really help you find these things quickly... and will be invaluable when you start adding the integration and unit tests. If there's any way I can help you get your local setup going, let me know! |
Codecov Report
@@ Coverage Diff @@
## main #220 +/- ##
==========================================
- Coverage 98.46% 96.82% -1.65%
==========================================
Files 71 57 -14
Lines 3458 2549 -909
Branches 301 189 -112
==========================================
- Hits 3405 2468 -937
- Misses 44 67 +23
- Partials 9 14 +5
Flags with carried forward coverage won't be shown. Click here to find out more.
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. |
|
Hi @chris93111 , are you still interested in pursuing this? If you'd like to get this into a release that still supports 2.9/2.10, it would be best to get this moving along for the best chance of that. I will need to get 3.0.0 out in time for the deadline for inclusion into the Ansible 6 community package, so I don't really have any leeway when to release that. If you're not concerned about that then no worries and no rush, just wanted to give you a heads-up. |
|
hello @briantist |
Great! There's nothing very important you need to know about removal of 2.9/2.10 support for your implementation, I only mention it in case you need this collection with one of those versions, or you would like to get kubernetes auth released in a version of this collection that users of those versions can trust for use. I don't actually expect the first release of 3.0.0 to be broken in 2.9 or 2.10, but since we will stop testing against those versions, any new change in 3.x.x may break compatibility, so I expect anyone using 2.9 or 2.10 to pin to Getting the unit tests and especially integration tests set up for this is absolutely going to be the most time consuming part of getting this ready to be merged. I believe it is entirely possible to do, but the timeline will depend on mostly on how much time you can devote to it, because I am very overloaded right now. I can be more effective now by helping your efforts and steering you in the right direction, rather than trying to implement myself, I think. In my opinion, the fastest way to get this to a point where we can merge, is to use the MMock method in integration tests. That could give us reasonable confidence, and will not require setting up kubernetes. We can then look up at real kubernetes of some kind as a new PR. |
|
@chris93111 I'm not sure what happened with d49061d but the test results don't look right; it seems like perhaps some changes from |
This was referenced Mar 1, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
SUMMARY
Add authentification k8s in lookup, for ansible operator (operator-sdk) use service account jwt token in login
ISSUE TYPE
COMPONENT NAME
lookup hashi_vault