diff --git a/lib/ansible/plugins/lookup/hashi_vault.py b/lib/ansible/plugins/lookup/hashi_vault.py index b58280cc463..1071b13d6af 100644 --- a/lib/ansible/plugins/lookup/hashi_vault.py +++ b/lib/ansible/plugins/lookup/hashi_vault.py @@ -252,11 +252,11 @@ class HashiVault: class LookupModule(LookupBase): - def run(self, terms, variables, **kwargs): + def run(self, terms, variables=None, **kwargs): if not HAS_HVAC: raise AnsibleError("Please pip install hvac to use the hashi_vault lookup module.") - vault_args = terms[0].split(' ') + vault_args = terms[0].split() vault_dict = {} ret = [] diff --git a/test/integration/targets/lookup_hashi_vault/lookup_hashi_vault/tasks/token_test.yml b/test/integration/targets/lookup_hashi_vault/lookup_hashi_vault/tasks/token_test.yml index 1f4828e5a3a..927881da898 100644 --- a/test/integration/targets/lookup_hashi_vault/lookup_hashi_vault/tasks/token_test.yml +++ b/test/integration/targets/lookup_hashi_vault/lookup_hashi_vault/tasks/token_test.yml @@ -5,11 +5,12 @@ set_fact: secret1: "{{ lookup('hashi_vault', conn_params ~ 'secret=' ~ vault_base_path ~ '/secret1 auth_method=token token=' ~ user_token) }}" secret2: "{{ lookup('hashi_vault', conn_params ~ 'secret=' ~ vault_base_path ~ '/secret2 token=' ~ user_token) }}" + secret3: "{{ lookup('hashi_vault', conn_params ~ ' secret=' ~ vault_base_path ~ '/secret2 token=' ~ user_token) }}" - name: 'Check secret values' fail: msg: 'unexpected secret values' - when: secret1['data']['value'] != 'foo1' or secret2['data']['value'] != 'foo2' + when: secret1['data']['value'] != 'foo1' or secret2['data']['value'] != 'foo2' or secret3['data']['value'] != 'foo2' - name: 'Failure expected when erroneous credentials are used' vars: