diff --git a/apps/accounts/automations/change_secret/database/mongodb/main.yml b/apps/accounts/automations/change_secret/database/mongodb/main.yml index 168607289..c51252861 100644 --- a/apps/accounts/automations/change_secret/database/mongodb/main.yml +++ b/apps/accounts/automations/change_secret/database/mongodb/main.yml @@ -11,9 +11,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" - ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl: "{{ jms_asset.spec_info.use_ssl | default('') }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" register: db_info @@ -31,8 +31,8 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" db: "{{ jms_asset.spec_info.db_name }}" @@ -49,7 +49,7 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" diff --git a/apps/accounts/automations/change_secret/database/mysql/main.yml b/apps/accounts/automations/change_secret/database/mysql/main.yml index 4af4a606d..3783dd34b 100644 --- a/apps/accounts/automations/change_secret/database/mysql/main.yml +++ b/apps/accounts/automations/change_secret/database/mysql/main.yml @@ -12,9 +12,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version register: db_info @@ -29,9 +29,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" @@ -46,7 +46,7 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version diff --git a/apps/accounts/automations/gather_accounts/database/mongodb/main.yml b/apps/accounts/automations/gather_accounts/database/mongodb/main.yml index 452241f6a..87d747ecd 100644 --- a/apps/accounts/automations/gather_accounts/database/mongodb/main.yml +++ b/apps/accounts/automations/gather_accounts/database/mongodb/main.yml @@ -12,8 +12,8 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" filter: users diff --git a/apps/accounts/automations/gather_accounts/database/mysql/main.yml b/apps/accounts/automations/gather_accounts/database/mysql/main.yml index 178062cf9..5888fcb78 100644 --- a/apps/accounts/automations/gather_accounts/database/mysql/main.yml +++ b/apps/accounts/automations/gather_accounts/database/mysql/main.yml @@ -11,9 +11,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: users register: db_info diff --git a/apps/accounts/automations/push_account/database/mongodb/main.yml b/apps/accounts/automations/push_account/database/mongodb/main.yml index 168607289..8dacc156a 100644 --- a/apps/accounts/automations/push_account/database/mongodb/main.yml +++ b/apps/accounts/automations/push_account/database/mongodb/main.yml @@ -12,8 +12,8 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" register: db_info @@ -31,8 +31,8 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" db: "{{ jms_asset.spec_info.db_name }}" @@ -49,7 +49,7 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" diff --git a/apps/accounts/automations/push_account/database/mysql/main.yml b/apps/accounts/automations/push_account/database/mysql/main.yml index 4af4a606d..3783dd34b 100644 --- a/apps/accounts/automations/push_account/database/mysql/main.yml +++ b/apps/accounts/automations/push_account/database/mysql/main.yml @@ -12,9 +12,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version register: db_info @@ -29,9 +29,9 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" name: "{{ account.username }}" password: "{{ account.secret }}" host: "%" @@ -46,7 +46,7 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version diff --git a/apps/accounts/automations/verify_account/database/mongodb/main.yml b/apps/accounts/automations/verify_account/database/mongodb/main.yml index 63a5df53c..7f6c02a10 100644 --- a/apps/accounts/automations/verify_account/database/mongodb/main.yml +++ b/apps/accounts/automations/verify_account/database/mongodb/main.yml @@ -12,7 +12,7 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert }}" diff --git a/apps/accounts/automations/verify_account/database/mysql/main.yml b/apps/accounts/automations/verify_account/database/mysql/main.yml index 82343b916..4f7181cd1 100644 --- a/apps/accounts/automations/verify_account/database/mysql/main.yml +++ b/apps/accounts/automations/verify_account/database/mysql/main.yml @@ -11,7 +11,7 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version diff --git a/apps/assets/automations/gather_facts/database/mongodb/main.yml b/apps/assets/automations/gather_facts/database/mongodb/main.yml index 084a27348..bcf2ff5e4 100644 --- a/apps/assets/automations/gather_facts/database/mongodb/main.yml +++ b/apps/assets/automations/gather_facts/database/mongodb/main.yml @@ -12,8 +12,8 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" register: db_info diff --git a/apps/assets/automations/gather_facts/database/mysql/main.yml b/apps/assets/automations/gather_facts/database/mysql/main.yml index 8ba210283..061f8d3f1 100644 --- a/apps/assets/automations/gather_facts/database/mysql/main.yml +++ b/apps/assets/automations/gather_facts/database/mysql/main.yml @@ -10,6 +10,10 @@ login_password: "{{ jms_account.secret }}" login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" + check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version register: db_info diff --git a/apps/assets/automations/ping/database/mongodb/main.yml b/apps/assets/automations/ping/database/mongodb/main.yml index 23a06c08d..43e0684db 100644 --- a/apps/assets/automations/ping/database/mongodb/main.yml +++ b/apps/assets/automations/ping/database/mongodb/main.yml @@ -12,7 +12,7 @@ login_port: "{{ jms_asset.port }}" login_database: "{{ jms_asset.spec_info.db_name }}" ssl: "{{ jms_asset.spec_info.use_ssl }}" - ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert }}" - ssl_certfile: "{{ jms_asset.secret_info.client_key }}" + ssl_ca_certs: "{{ jms_asset.secret_info.ca_cert | default('') }}" + ssl_certfile: "{{ jms_asset.secret_info.client_key | default('') }}" connection_options: - tlsAllowInvalidHostnames: "{{ jms_asset.spec_info.allow_invalid_cert}}" diff --git a/apps/assets/automations/ping/database/mysql/main.yml b/apps/assets/automations/ping/database/mysql/main.yml index bd34a3914..3870b720c 100644 --- a/apps/assets/automations/ping/database/mysql/main.yml +++ b/apps/assets/automations/ping/database/mysql/main.yml @@ -11,7 +11,7 @@ login_host: "{{ jms_asset.address }}" login_port: "{{ jms_asset.port }}" check_hostname: "{{ jms_asset.spec_info.use_ssl and not jms_asset.spec_info.allow_invalid_cert }}" - ca_cert: "{{ jms_asset.secret_info.ca_cert }}" - client_cert: "{{ jms_asset.secret_info.client_cert }}" - client_key: "{{ jms_asset.secret_info.client_key }}" + ca_cert: "{{ jms_asset.secret_info.ca_cert | default(omit) }}" + client_cert: "{{ jms_asset.secret_info.client_cert | default(omit) }}" + client_key: "{{ jms_asset.secret_info.client_key | default(omit) }}" filter: version diff --git a/apps/ops/ansible/inventory.py b/apps/ops/ansible/inventory.py index a0c5a19dc..b07876224 100644 --- a/apps/ops/ansible/inventory.py +++ b/apps/ops/ansible/inventory.py @@ -165,13 +165,14 @@ class JMSInventory: tp, category = asset.type, asset.category name = asset.name.replace(' ', '_').replace('[', '_').replace(']', '_') + secret_info = {k: v for k, v in asset.secret_info.items() if v} host = { 'name': name, 'jms_asset': { 'id': str(asset.id), 'name': asset.name, 'address': asset.address, 'type': tp, 'category': category, 'protocol': protocol.name, 'port': protocol.port, - 'spec_info': asset.spec_info, 'secret_info': asset.secret_info, + 'spec_info': asset.spec_info, 'secret_info': secret_info, 'protocols': [{'name': p.name, 'port': p.port} for p in protocols], }, 'jms_account': {