Jira (BOLT-1269) Prompt for sensitive data from inventory.

Issue Type:	New Feature
Assignee:	Unassigned
Created:	2019/04/24 1:20 PM
Priority:	Normal
Reporter:	Alex Dreyer

This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)

Alex Dreyer (JIRA)

unread,

Apr 25, 2019, 1:36:02 PM4/25/19

to puppe...@googlegroups.com

Alex Dreyer updated an issue

Change By:	Alex Dreyer
Sprint:	Bolt Ready for Grooming

Alex Dreyer (JIRA)

unread,

Apr 25, 2019, 6:44:02 PM4/25/19

to puppe...@googlegroups.com

Alex Dreyer updated an issue

Change By:	Alex Dreyer

In scope:
Have a single generalized inventory plugin hook.
allow plugins to be used at arbitrary locations in inventory whenever an object with a {{_plugin}} key is encountered.
implement a prompt plugin that accepts a single {{name}} parameter.
support lazily evaluating the "prompt plugin" when fetching config for a node or group.

Out of scope:
worrying about inventory plugins outside of config.(ie for names, targets, facts, or vars)
making a decision on whether target-lookups are special.

{{noformat}}
groups:
  - name: first_group
    targets: [ .... ]
    config:
       ssh:
         password:
           _plugin: prompt
           message: "Password for group pass

{{nofrmat}}

Alex Dreyer (JIRA)

unread,

Apr 25, 2019, 6:49:02 PM4/25/19

to puppe...@googlegroups.com

Alex Dreyer updated an issue

Change By:	Alex Dreyer

In scope:
* Have a single generalized inventory plugin hook.
* allow plugins to be used at arbitrary locations in inventory whenever an object with a {{_plugin}} key is encountered.
* implement a prompt plugin that accepts a single {{name}} parameter.
support lazily evaluating the " * Do not prompt plugin" when fetching config until something to {{update_target}} for a node or group target which needs this information .

Out of scope:
worrying about inventory plugins outside of config.(ie for names, targets, facts, or vars)
making a decision on whether target-lookups are special.

{{noformat}}

nodes:
   - uri: my_node
     config:
       ssh:
         password: { _plugin: prompt, message: "Password for my_node"}d

groups:
  - name: first_group
    targets: [ .... ]
    config:
       ssh:
         password:
           _plugin: prompt

message: "Password for first group pass "

{{ nofrmat noformat }}

Alex Dreyer (JIRA)

unread,

Apr 25, 2019, 6:49:02 PM4/25/19

to puppe...@googlegroups.com

Alex Dreyer updated an issue

Change By:	Alex Dreyer

In scope:
* Have a single generalized inventory plugin hook.
* allow plugins to be used at arbitrary locations in inventory whenever an object with a {{_plugin}} key is encountered.
* implement a prompt plugin that accepts a single {{name}} parameter.

* Do not prompt until something to {{update_target}} for a target which needs this information.

Out of scope:
* worrying about inventory plugins outside of config.(ie for names, targets, facts, or vars)
* making a decision on whether target-lookups are special.

{noformat}
nodes:
   - uri: my_node
     config:
       ssh:
         password: { _plugin: prompt, message: "Password for my_node"}d
groups:
  - name: first_group
    targets: [ .... ]
    config:
       ssh:
         password:
           _plugin: prompt
           message: "Password for first group"

{noformat}

Alex Dreyer (JIRA)

unread,

Apr 25, 2019, 6:49:02 PM4/25/19

to puppe...@googlegroups.com

Alex Dreyer updated an issue

Change By:	Alex Dreyer

In scope:
* Have a single generalized inventory plugin hook.
* allow plugins to be used at arbitrary locations in inventory whenever an object with a {{_plugin}} key is encountered.
* implement a prompt plugin that accepts a single {{name}} parameter.
* Do not prompt until something to {{update_target}} for a target which needs this information.

Out of scope:

worrying about inventory plugins outside of config.(ie for names, targets, facts, or vars)

making a decision on whether target-lookups are special.

{

{ noformat} }

nodes:
   - uri: my_node
     config:
       ssh:
         password: { _plugin: prompt, message: "Password for my_node"}d
groups:
  - name: first_group
    targets: [ .... ]
    config:
       ssh:
         password:
           _plugin: prompt
           message: "Password for first group"
{

{ noformat} }

Lucy Wyman (JIRA)

unread,

Apr 30, 2019, 12:28:35 PM4/30/19

to puppe...@googlegroups.com

Lucy Wyman updated an issue

Change By:	Lucy Wyman
Sprint:	Bolt Ready for Grooming Kanban

Lucy Wyman (JIRA)

unread,

May 13, 2019, 9:42:03 AM5/13/19

to puppe...@googlegroups.com

Lucy Wyman assigned an issue to Lucy Wyman

Change By:	Lucy Wyman
Assignee:	Lucy Wyman

Lucy Wyman (JIRA)

unread,

May 13, 2019, 12:56:03 PM5/13/19

to puppe...@googlegroups.com

Lucy Wyman assigned an issue to Unassigned

Cas Donoghue (JIRA)

unread,

May 14, 2019, 4:59:03 PM5/14/19

to puppe...@googlegroups.com

Cas Donoghue assigned an issue to Cas Donoghue

Change By:	Cas Donoghue
Assignee:	Cas Donoghue

Lucy Wyman (JIRA)

unread,

May 15, 2019, 12:40:03 PM5/15/19

to puppe...@googlegroups.com

Lucy Wyman updated an issue

Change By:	Lucy Wyman

In scope:
* Have a single generalized inventory plugin hook.
* allow plugins to be used at arbitrary locations in inventory whenever an object with a {{_plugin}} key is encountered.
* implement a prompt plugin that accepts a single {{name}} parameter.

* Do not prompt until something to {{ When update_target }} for a is called to update target which needs this information config, that indicates the target is actually being used and should be prompted .
Don't prompt for targets that aren't used.

Out of scope:
* worrying about inventory plugins outside of config.(ie for names, targets, facts, or vars)
* making a decision on whether target-lookups are special.

{noformat}
nodes:
   - uri: my_node
     config:
       ssh:
         password: { _plugin: prompt, message: "Password for my_node"}d
groups:
  - name: first_group
    targets: [ .... ]
    config:
       ssh:
         password:
           _plugin: prompt
           message: "Password for first group"
{noformat}

Cas Donoghue (JIRA)

unread,

May 20, 2019, 2:57:02 PM5/20/19

to puppe...@googlegroups.com

Cas Donoghue commented on