Skip to content

Support for 'env_var_' prefix option to secure any data model secret #720

Description

@marehler

Which role would this new feature be associated?

cisco.nac_dc_vxlan.dtc.create

New feature description:

My customer requires to not store any secrets in the YAML configuration files. He would like to refer to environment variables defined in his CI/CD system.

Currently NaC VXLAN supports environment variable lookup using the 'env_var_' prefix specifically for switch credentials. I propose to extend this option to support any data model secret. Example:

---
vxlan:
  underlay:
    bgp:
      authentication_enable: true
      authentication_key_type: 3
      authentication_key: env_var_bgp_auth_key

Would this be a new feature requiring a new role?

n/a

Which section of the data model is the new feature related?

vxlan.underlay

Would this be a new feature requiring a new addition to the data model?

n/a

New or Affected Documentation for New Feature

Need to extend credentials guide.

Potential Ansible Task Config

n/a

Ansible Version

ansible [core 2.16.3]

Ansible Collection Versions

Collection         Version
------------------ -------
ansible.netcommon  7.1.0  
ansible.posix      2.0.0  
ansible.utils      5.1.2  
cisco.dcnm         3.10.0 
cisco.nac_dc_vxlan 0.6.0  
cisco.nxos         9.4.0  
community.general  10.1.0

Cisco Nexus Dashboard Version

3.2(1i)

Cisco NX-OS Version

10.5(3)

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions