Python GSAP broker reference implementation
Dynamic inventory plugin — queries Bastion for managed devices, groups by OS and compliance state, bastion_* host vars, zero credentials in inventory. Credential lookup plugin — resolves short-lived credentials from Bastion's CredentialResolver at execution time. Graceful degradation when broker unavailable. Chronicle callback plugin — reports playbook lifecycle events (started, task completed, completed) to Chronicle. Optionally triggers compliance re-evaluation after playbook completion. Shared BastionClient for all plugins using stdlib urllib. Signed-off-by: Tyler King <tking@guildhouse.dev> |
||
|---|---|---|
| ansible_collection/guildhouse/bastion | ||
| gsap_broker | ||
| tests | ||
| .gitignore | ||
| Dockerfile | ||
| INTUNE.md | ||
| pyproject.toml | ||
| README.md | ||
| requirements.txt | ||
| ROADMAP.md | ||
| uv.lock | ||
fastapi-gsap
Lightweight FastAPI reference implementation of the GSAP broker (GCAP-SPEC-SHELLBOUND-BROKER-0001)