Ansible AWX Plugin - secret fetch via playbook using Universal Identity

Suggest Edits

Below, please find an example of using Ansible AWX with Akeyless Platform for fetching credentials, utilizing Akeyless Universal Identity.

Prerequisites

The section refers to changes that should be done in the awx machine (awx-task container).

  1. Set akeyless-vault url in: VAULT_ADDR environment variable:
export VAULT_ADDR=https://hvp.akeyless.io
  1. You’ll need to configure the Akeyless temporary API token (this is the recommended and the more secure method). For token rotation, please read more here. The rotated token should be saved in this file /var/lib/awx/.vault-token

Configuring AWX Plugin

To use the vault plugin, complete the following procedure:

  1. Download this plugin and add it to your lookup_plugins directory as described in the link.
  2. Create a new template, according to the below:
1700 1037

After successful job launch you will see the following:

1727

For an additional ways to work with Ansible AWX, see Ansible AWX Plugin - secret fetch via playbook.

Updated 2 months ago