Key in write data does not expand

[terryhowe]

Key in write data does not expand

[TerryHowe]

In theory this should work too:

- hosts: localhost
  vars: 
    - key: &key "key123"
    - value: "value123"
  tasks:
    - hashivault_write:
      secret: "/cesta/k/jebnutemu/secretu"
        data:
          *key: "{{ value }}"

[TerryHowe]

I've seen this before and it is really an ansible issue: ansible/ansible#17324

…

On Sun, Mar 12, 2017 at 3:11 PM, michalmedvecky ***@***.***> wrote: Sample: - hosts: localhost vars: - key: "key123" - value: "value123" tasks: - hashivault_write: secret: "/cesta/k/jebnutemu/secretu" data: "{{ key }}": "{{ value }}" $ vault read /cesta/k/jebnutemu/secretu Key Value --- ----- refresh_interval 168h0m0s {{ key }} value123 — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#9>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAGWsTB7evuKK2ItSuSFd5MMl94N_mz6ks5rlF99gaJpZM4MarUw> .

[michalmedvecky]

Okay for desperates like me, one can do

- hosts: localhost
  vars: 
    - key: "key123"
    - value: "value123"
  tasks:
    - hashivault_write:
      secret: "/cesta/k/jebnutemu/secretu"
        data:
          "{'{{ key }}': '{{ value }}'}"

[michalmedvecky]

Hard to use with with_items though

[TerryHowe]

Reopening this to document this common issue

[absynth76]

For info, I used this way:

- hosts: localhost
  vars: 
    - key: "key123"
    - value: "value123"
  tasks:
  - hashivault_write:
      secret: my-secret
      data: "{{ my_new_data }}"
      version: 2
    vars:
      my_new_data: "{{ {key:value} }}"

you can even loop with that I guess

[Bharathkumarraju]

we can use set_fact to fix this like this.

@TerryHowe @absynth76 @michalmedvecky

  tasks:
    - set_fact:
        vaultdata: "{{ vaultdata | default({}) | combine ({ item.name : item.value }) }}"
      with_items:
        - "{{envs}}"
    - name: add secrets in hashicorp vault
      hashivault_secret:
        version: 2
        secret: "{{env}}/tyk"
        data: "{{vaultdata}}"