Decode vaulted args before sending over ansible-connection. (#78236)

I'm not aware of a way to easily get vault secrets decoded on the
ansible-connection side without sending the vault secrets over the
connection in the same way, so just decode them for transport.
pull/78248/head
Kate Case 2 years ago committed by GitHub
parent 2e4b0fefbf
commit fff14d7c1d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -0,0 +1,3 @@
bugfixes:
- ansible-connection - decrypt vaulted parameters before sending over the socket, as
vault secrets are not available on the other side.

@ -144,7 +144,7 @@ class Connection(object):
) )
try: try:
data = json.dumps(req, cls=AnsibleJSONEncoder) data = json.dumps(req, cls=AnsibleJSONEncoder, vault_to_text=True)
except TypeError as exc: except TypeError as exc:
raise ConnectionError( raise ConnectionError(
"Failed to encode some variables as JSON for communication with ansible-connection. " "Failed to encode some variables as JSON for communication with ansible-connection. "

Loading…
Cancel
Save