Dynamic inventory plugin — queries Bastion for managed devices, groups by OS and compliance state, bastion_* host vars, zero credentials in inventory. Credential lookup plugin — resolves short-lived credentials from Bastion's CredentialResolver at execution time. Graceful degradation when broker unavailable. Chronicle callback plugin — reports playbook lifecycle events (started, task completed, completed) to Chronicle. Optionally triggers compliance re-evaluation after playbook completion. Shared BastionClient for all plugins using stdlib urllib. Signed-off-by: Tyler King <tking@guildhouse.dev>
13 lines
466 B
YAML
13 lines
466 B
YAML
namespace: guildhouse
|
|
name: bastion
|
|
version: 0.1.0
|
|
description: >
|
|
Bastion MDM integration for Ansible. Provides dynamic inventory
|
|
from Bastion's device registry, credential resolution via
|
|
Bastion's zero-storage CredentialResolver, and Chronicle audit
|
|
callback for playbook governance.
|
|
license:
|
|
- Apache-2.0
|
|
dependencies: {}
|
|
repository: https://git.guildhouse.dev/tking/fastapi-gsap
|
|
documentation: https://git.guildhouse.dev/tking/fastapi-gsap/docs/ansible
|