ansible/awx

Get job context in custom credential plugin

Open

#13,646 opened on Mar 3, 2023

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (3,333 forks)batch import
communitycomponent:apihelp wantedtype:enhancement

Repository metrics

Stars
 (13,071 stars)
PR merge metrics
 (Avg merge 24d 6h) (30 merged PRs in 30d)

Description

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX is open source software provided for free and that I might not receive a timely response.

Feature type

Enhancement to Existing Feature

Feature Summary

In order to do proper checks from our own SSH Credential API towards AWX, we need to send the job id. Guessing which job it could be is not an option, as it's possible that multiple jobs are running simultaneously.

Select the relevant components

  • UI
  • API
  • Docs
  • Collection
  • CLI
  • Other

Steps to reproduce

Following scenario (for my case):

  • I've my own (proprietary) credential system
  • The credential system needs to know which AWX job is requesting the SSH certificate
  • If the job exists and the User is verified, it will return a custom signed SSH certificate based on the permissions the user has

Current results

The documentation for custom credential plugins is rather bad than good and looking into the code, it seems like it's currently not possible anyway.

Suggested feature result

It should be possible to only generate certificates or share secrets from a KV store where the user is privileged to w/o a generic permission (if the backend supports that).

Additional information

No response

Contributor guide