LDAP Config Module Doesn't have token_bound_cidrs support

[adawalli]

First off, love this module - amazing work.

Would you consider adding token_bound_cidrs to the hashivault_auth_ldap module? Thankfully, you have this on OIDC roles and approles and it just appears to be missing on this one login method.

Thank you for your consideration!

https://www.vaultproject.io/api/auth/ldap#token_bound_cidrs

[TerryHowe]

Something like this probably https://github.com/TerryHowe/ansible-modules-hashivault/blob/main/ansible/modules/hashivault/hashivault_oidc_auth_role.py#L65

Not hard to do, just adding the docs, parameters and any desired state type logic

[adawalli]

I can submit a PR tomorrow

[adawalli]

Unfortunately, HVAC doesn't support CIDRs yet for LDAP - I will have to get it added there first.

How hard will it be to add guards in the code for folks that have HVAC <= the current version?

[href]

I am also interested in the token_bound_cidrs support. I guess using configuration would be a good idea (as noted in #446), but that's a desgin decision.

Anything we can do to unblock this, to get support for newer parameters?

[TerryHowe]

The easy thing to do would just add a token_bound_cidrs parameter to the current call

[href]

I went ahead and proposed a PR that does exactly that.