fix: retrieve vault entries by ID to ensure permission for secret access (#9)

Author: DannyBedard

.github/workflows/galaxy_publish.yml

@@ -2,6 +2,7 @@ name: Publish to Ansible Galaxy
 
 on:
   release:
+    types: published
   workflow_dispatch:
 
 jobs:

README.md

@@ -89,7 +89,7 @@ Use the following playbook to authenticate with DVLS and fetch every secrets fro
     server_base_url: "https://example.yourcompany.com"
     app_key: "{{ lookup('env', 'DVLS_APP_KEY') }}"
     app_secret: "{{ lookup('env', 'DVLS_APP_SECRET') }}"
-    register: server
+  register: server
 
 - name: Fetch URI
   debug:

galaxy.yml

@@ -1,6 +1,6 @@
 namespace: devolutions
 name: dvls
-version: 1.1.0
+version: 1.1.1
 readme: README.md
 authors:
 - Danny Bédard <[email protected]>

plugins/modules/fetch_secrets.py

@@ -145,8 +145,9 @@ def run_module():
                     entry = get_vault_entry(server_base_url, token, vault_id, secret_id)
                     fetched_secrets[secret_name] = entry['data']
         else:
-            for entry in entries:
-                entry_name = entry['name']
+            for secret in entries:
+                entry_name = secret['name']
+                entry = get_vault_entry(server_base_url, token, vault_id, secret['id'])
                 fetched_secrets[entry_name] = entry['data']
 
         result = fetched_secrets