Ansible Module for Doppler Secrets

Discussions
1

Hi All,

I’m new here and while I’m a Red Hat employee, this doesn’t reflect me posting on behalf of Red Hat. That said, I’m super interested in secrets management and, from my short experience, I really like Doppler. As a result, I’ve put together a doppler ansible collection with minimal functionality that does CRUD operations on secrets. Hope it helps people, and I’d love some feedback on the helpfulness of the repository:

Code: GitHub - dcostakos/doppler: Doppler Ansible Secrets Collection

Example Playbook


  - name: Test creating Doppler secret
    dcostakos.doppler.doppler_secrets:
      name: MY_SECRET
      project: example-project
      config: dev
      token: "{{ doppler_token }}"
      value: "my first secret is special"
    register: secret

  - name: Print out value of the secret
    ansible.builtin.debug:
      var: secret

  - name: Test lookup plugin
    ansible.builtin.debug:
      msg: "{{ lookup('dcostakos.doppler.doppler_secrets', project='example-project', token=doppler_token, config='dev', name='MY_SECRET') }}"

  - name: Test updating Doppler secret
    dcostakos.doppler.doppler_secrets:
      name: MY_SECRET
      project: example-project
      config: dev
      token: "{{ doppler_token }}"
      value: "step 2 (update)"
    register: secret

  - ansible.builtin.debug: var=secret

  - name: Test for non-existing secret
    dcostakos.doppler.doppler_secrets:
      name: NOT_MY_SECRET
      project: example-project
      config: dev
      token: "{{ doppler_token }}"
      state: absent

  - name: Delete existing secret
    dcostakos.doppler.doppler_secrets:
      name: MY_SECRET
      project: example-project
      config: dev
      token: "{{ doppler_token }}"
      state: absent
2

Hi @Dave_Costakos , I have created an account on this forum in order to thank you.

Your ansible collection is incredibly useful, idempotent and well designed, no doubt you are an ansible expert. It has helped me adopting doppler as a viable HashiCorp Vault alternative, since the later has a well known integration with ansible.

Kudos !

1 Like
3

I’m glad someone is using it! Thanks :pray: