I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

Hi Mark,

I don't know a way to pass credentials variables into inventory. But can ansible-vault help you? You can encrypt your inventory file.

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

Hi Andrey,

Was thinking I'd give that a try, but it would be a band-aid at best. I'd really like a generic inventory plug-in file that I can pass variables to. Using a vault would require me to hardcode all the information into the YAML file, just with an encrypted password. Also, think it's unlikely to work, since the vault requires a password, which, I think, be the same thing as trying to pass a variable. I will put that in as a feature request in Github. 

Hi Mark,

I don't know a way to pass credentials variables into inventory. But can ansible-vault help you? You can encrypt your inventory file.

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

Mark,

Hi, good day to you.

Are you looking to do something like the below then?

plugin: ibm.power_hmc.powervm_inventoryhmc_hosts:  - hmc: "HMC1"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC2"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC3"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"filters:    PartitionState: 'running'

Many thanks, Steve

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

If I understand this correctly, this would be using environment variables. Not exactly sure how I would pass them to an execution environment or how to keep that secure.  Might be worth mucking with, thanks Steve. Just be so much smoother if I could just pass variables  and/or credentials to the plugin. 

Mark,

Hi, good day to you.

Are you looking to do something like the below then?

plugin: ibm.power_hmc.powervm_inventoryhmc_hosts:  - hmc: "HMC1"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC2"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC3"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"filters:    PartitionState: 'running'

Many thanks, Steve

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

If I understand this correctly, this would be using environment variables. Not exactly sure how I would pass them to an execution environment or how to keep that secure.  Might be worth mucking with, thanks Steve. Just be so much smoother if I could just pass variables  and/or credentials to the plugin. 

Mark,

Hi, good day to you.

Are you looking to do something like the below then?

plugin: ibm.power_hmc.powervm_inventoryhmc_hosts:  - hmc: "HMC1"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC2"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"  - hmc: "HMC3"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"filters:    PartitionState: 'running'

Many thanks, Steve

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,

You all rock! That works as great solution. So here's the summary of what I did.

Created a custom credential:

Input Configuration

fields:  - id: username    type: string    label: Username  - id: password    type: string    label: Password  - id: hostname    type: string    label: Hostnamerequired:  - username  - password  - hostname

Injector configuration

env:  hmc_hostname: '{{ hostname }}'  hmc_password: '{{ password }}'  hmc_username: '{{ username }}'

The added an actual credential with HMC hostname, user and password.

Then created an inventory source, that uses this new credential and the plugin in a generic state as much as possible, pulled from a project. The YAML looks like this:

# Pull inventory from a single HMC---plugin: ibm.power_hmc.powervm_inventoryadvanced_fields: truehmc_hosts:  - hmc: "{{ lookup('env', 'hmc_hostname') }}"    user: "{{ lookup('env', 'hmc_username') }}"    password: "{{ lookup('env', 'hmc_password') }}"keyed_groups:  - prefix: type    key: PartitionTypecompose:  current_memory: CurrentMemory  os: OperatingSystemVersion  name: PartitionName  HMCIP: AssociatedHMC

When run, this now pulls in the inventory information from the HMC and populates AAP.  This also allows me to use this project file for any HMC, just a one-to-one mapping between inventory sources, credentials and HMC's. 

This is working great.  Thanks again!

Hopefully this will help someone in the future.

I'm trying to use the inventory plugin that's part of ibm.power_hmc. 

powervm_inventory as per the documentation on Galaxy (Ansible Galaxy) connects to the HMC, pulls and populates AAP inventory. In general, the plugin works as advertised, but what I do NOT want to is hard code hostnames and credentials into the yaml file, as provided in all the examples.

I've tried various different ways to pass it variables in AAP but have had zero success. Has anyone found a way to implement this add-in without hardcoding credentials?  Last thing I want is credentials stored in any sort of repositories.

Thanks,