hashivault_approle_role_secret_create does not support wrap_ttl

[terryhowe]

hashivault_approle_role_secret_create does not support wrap_ttl

[TerryHowe]

True.

The API:
https://www.vaultproject.io/api/auth/approle/index.html#create-custom-approle-secret-id

hvac:
https://github.com/ianunruh/hvac/blob/master/hvac/v1/__init__.py#L909

ansible module:
https://github.com/TerryHowe/ansible-modules-hashivault/blob/master/ansible/modules/hashivault/hashivault_approle_role_secret_create.py#L84

[vuminhkh]

So it's a limitation of hvac ? As Vault proposed the feature of response wrapping, perhaps their rest api docs are not complete ? Currently as a workaround, I use the Vault cli:

vault write -f -format=json -wrap-ttl=5m auth/approle/role/goldfish/secret-id

[TerryHowe]

I don't see support for wrap ttl in the vault api either, just metadata and cidr_list. Are you sure it is pasing on wrap-ttl in that case?

[TerryHowe]

For the other values, d09e4ed

I don't think the cidr_list is supported in the released version of hvac yet

[vuminhkh]

For wrap-ttl, I found this doc. It's about token wrapping but I think the idea must be the same for app role secret.

[TerryHowe]

2284fcb should cover this