??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
๓
เUdac @` s๒ d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l Z d d l Z d d l
m Z m Z d d
l m Z d d l m Z d d l m Z m Z d e f d YZ d e f d YZ d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys
lookup: onepassword
author:
- Scott Buchanan (@scottsb)
- Andrew Zenk (@azenk)
- Sam Doran (@samdoran)
version_added: "2.6"
requirements:
- C(op) 1Password command line utility. See U(https://support.1password.com/command-line/)
short_description: fetch field values from 1Password
description:
- C(onepassword) wraps the C(op) command line utility to fetch specific field values from 1Password.
options:
_terms:
description: identifier(s) (UUID, name, or subdomain; case-insensitive) of item(s) to retrieve.
required: True
field:
description: field to return from each matching item (case-insensitive).
default: 'password'
master_password:
description: The password used to unlock the specified vault.
version_added: '2.7'
aliases: ['vault_password']
section:
description: Item section containing the field to retrieve (case-insensitive). If absent will return first match from any section.
subdomain:
description: The 1Password subdomain to authenticate against.
version_added: '2.7'
username:
description: The username used to sign in.
version_added: '2.7'
secret_key:
description: The secret key used when performing an initial sign in.
version_added: '2.7'
vault:
description: Vault containing the item to retrieve (case-insensitive). If absent will search all vaults.
notes:
- This lookup will use an existing 1Password session if one exists. If not, and you have already
performed an initial sign in (meaning C(~/.op/config exists)), then only the C(master_password) is required.
You may optionally specify C(subdomain) in this scenario, otherwise the last used subdomain will be used by C(op).
- This lookup can perform an initial login by providing C(subdomain), C(username), C(secret_key), and C(master_password).
- Due to the B(very) sensitive nature of these credentials, it is B(highly) recommended that you only pass in the minimal credentials
needed at any given time. Also, store these credentials in an Ansible Vault using a key that is equal to or greater in strength
to the 1Password master password.
- This lookup stores potentially sensitive data from 1Password as Ansible facts.
Facts are subject to caching if enabled, which means this data could be stored in clear text
on disk or in a database.
- Tested with C(op) version 0.5.3
s
# These examples only work when already signed in to 1Password
- name: Retrieve password for KITT when already signed in to 1Password
debug:
var: lookup('onepassword', 'KITT')
- name: Retrieve password for Wintermute when already signed in to 1Password
debug:
var: lookup('onepassword', 'Tessier-Ashpool', section='Wintermute')
- name: Retrieve username for HAL when already signed in to 1Password
debug:
var: lookup('onepassword', 'HAL 9000', field='username', vault='Discovery')
- name: Retrieve password for HAL when not signed in to 1Password
debug:
var: lookup('onepassword'
'HAL 9000'
subdomain='Discovery'
master_password=vault_master_password)
- name: Retrieve password for HAL when never signed in to 1Password
debug:
var: lookup('onepassword'
'HAL 9000'
subdomain='Discovery'
master_password=vault_master_password
username='tweety@acme.com'
secret_key=vault_secret_key)
s/
_raw:
description: field data requested
N( t Popent PIPE( t
LookupBase( t AnsibleLookupError( t to_bytest to_textt OnePassc B` sh e Z d d Z d Z d Z d
d Z d
d
d Z d Z d d
e d Z
d
d Z RS( t opc C` sX | | _ t j j d | _ t | _ d | _ d | _ d | _
d | _ d | _ d S( Ns ~/.op/config(
t cli_patht ost patht
expandusert config_file_patht Falset logged_int Nonet tokent subdomaint usernamet
secret_keyt master_password( t selfR ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt __init__s s c C` sภ t j j | j rฒ | j s- t d n yd d d g } | j rZ d | j d g } n | j | d t | j \ } } } | j | _
Wqผ t k
rฎ | j qผ Xn
| j d S( Ns< Unable to sign in to 1Password. master_password is required.t signins --output=rawt
command_input( R R t isfileR R R R t _runR t stripR t
full_login( R t argst rct outt err( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt get_token} s '
c C` s yV | j d d g d t \ } } } | d k r? t | _ n | j sU | j n WnA t k
r } | j t j k r t d | j n | n Xd S( Nt gett accountt
ignore_errorsi s@ 1Password CLI tool '%s' not installed in path on control machine( R" t TrueR R) t OSErrort errnot ENOENTR R ( R R& R' R( t e( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt assert_logged_in s $ c C` sv d d | g } | d k r4 | d j | g 7} n | j sZ | t d | j g 7} n | j | \ } } } | S( NR* t items --vault={0}s
--session=( R t formatR R R R" ( R t item_idt vaultR% R& t outputt dummy( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt get_raw s c C` s5 | j | | } | d k r1 | j | | | Sd S( Nt ( R9 t _parse_field( R R5 t fieldt sectionR6 R7 ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt get_fieldฉ s c C` s d | j | j | j | j g k r3 t d n d d j | j t | j t | j d g } | j | d t | j \ } } } | j | _
d S( Ns Unable to perform initial sign in to 1Password. subdomain, username, secret_key, and master_password are required to perform initial sign in.R s {0}.1password.coms --output=rawR ( R R R R R R R4 R R" R# R ( R R% R& R' R( ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyR$ ญ s $ 'i c
C` s | j g | } t | d t d t d t } | j d | \ } } | j } | rz | | k rz t t | n | | | f S( Nt stdoutt stderrt stdint input( R R R t communicatet waitR R
(
R R% t expected_rcR R, t commandt pR' R( R& ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyR" ฝ s c C` s t j | } | d k rs xU | d j d g D]: } | j d d j | j k r2 | j d d Sq2 Wn x | d j d g D]
} | d k rพ | j | d j k rพ q n xN | j d g D]: } | j d d j | j k rั | j d d Sqั Wq Wd S(
Nt detailst fieldst nameR: t valuet sectionst titlet tt v( t jsont loadsR R* t lower( R t data_jsont
field_namet
section_titlet datat
field_datat section_data( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyR; ฦ s $ ($N( t __name__t
__module__R R) R2 R R9 R> R$ R R" R; ( ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyR q s
t LookupModulec B` s e Z d d Z RS( c
K` sั t } | j d d } | j d } | j d } | j d | _ | j d | _ | j d | _ | j d | j d | _ | j g } x- | D]% } | j | j | | | | qค W| S(
NR< t passwordR= R6 R R R R t vault_password( R R* R R R R R2 t appendR> (
R t termst variablest kwargsR R< R= R6 t valuest term( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt runื s
#N( RY RZ R Rd ( ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyR[ ี s ( t
__future__R R R t typet
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNR/ RP R t
subprocessR R t ansible.plugins.lookupR
t ansible.errorsR t ansible.module_utils._textR R
t objectR R[ ( ( ( sF /usr/lib/python2.7/site-packages/ansible/plugins/lookup/onepassword.pyt s"
3 d