vaultkey
jtcarnes/vaultkey/awx
Terraform module to create ssh key for Ansible AWX using Hashicorp Vaults ssh cert backend
Terraform AWX Vault Key Module Terraform module to create ssh key for Ansible AWX using Hashicorp Vaults ssh cert backend. Requirements | Name | Version | |------|---------| | terraform | >= 1.1.0 | | awx | >= 0.15.0 | | local | >= 1.0 | | tls | >= 3.0.0 | Providers | Name | Version | |------|---------| | awx | >= 0.15.0 | | tls | >= 3.0.0 | Modules No modules. Resources | Name | Type | |------|------| | awx_credential.this | resource | | awx_credential_input_source.this | resource | | awx_credential_machine.this | resource | | tls_private_key.generated_key | resource | Inputs | Name | Description | Type | Default | Required | |------|-------------|------|---------|:--------:| | awx\_machine\_credential\_key | The SSH key that will be SIGNED by Hashicorp vault. If not provided one will be
| Name | Type | Description | Default |
|---|---|---|---|
| vault_vaild_principals | list(string) | List of either usernames or hostnames that the certificate should be signed for. | |
| awx_organization_id | number | ID of the AWX organization. | |
| vault_backend_role_name | string | Name of the Vault role used to sign the ssh key. | |
| vault_url | string | URL of the Vault instance from the perspective of the AWX instance. | |
| vault_authentication_config | map(string) | Authentication configuration for AWX to authenticate to Vault. Valid options are | |
| awx_machine_credential_name | string | Name for the machine credential. | |
| awx_machine_credential_username | string | Username for the AWX credential. | |
| awx_machine_credential_key | object({ public_key = str | The SSH key that will be SIGNED by Hashicorp vault. If not provided one will be | |
| vault_credential_name | string | Name for the Vault credential in AWX. | |
| vault_auth_path | string | Path to authentication method on Vault backend. | "" |
| vault_secret_path | string | Path to the SSH signing backend in Vault. | "ssh" |
awx_ssh_key_pair — Keypair for the machine credential, either generated or passed in.awx_machine_credential_id — ID of the created machine credential.vault_credential_id — ID of the vault credential created.vault_credential_input_source_id — ID of the credential input source. Generally unneeded.