Podman Secret - JSON

[sveno1990]

If I pass a json value to my podman secret:

`    podman_secrets:
      - name: password
        state: present
        force: true
        data: '{"test": "json"}'

And I mount this secret in my .container file
Secret=password,type=mount,target=/test/test.json

When I exec in my container I see that ansible turned my double quotes to single quotes so no longer valid json.

sh-4.2# cat /test/test.json {'test': 'json'}

Is there a way to solve this?

[richm]

It appears to be an issue with the way that the containers.podman.podman_secret handles the data argument.

    - name: Debug1
      containers.podman.podman_secret:
        name: mysecret2
        state: present
        force: true
        data: "{{ __data }}"
      vars:
        __data: '{"test": "json"}'

then following the instructions at https://docs.ansible.com/ansible/latest/dev_guide/debugging.html#debugging-modules
this is what the module arguments look like:

{"ANSIBLE_MODULE_ARGS": {"name": "mysecret2", "state": "present", "force": true, "data": {"test": "json"}, "_ansible_check_mode": false, "_ansible_no_log": false, "_ansible_debug": false, "_ansible_diff": false, "_ansible_verbosity": 7, "_ansible_version": "2.16.2", "_ansible_module_name": "containers.podman.podman_secret", "_ansible_syslog_facility": "LOG_USER", "_ansible_selinux_special_fs": ["fuse", "nfs", "vboxsf", "ramfs", "9p", "vfat"], "_ansible_string_conversion_action": "warn", "_ansible_socket": null, "_ansible_shell_executable": "/bin/sh", "_ansible_keep_remote_files": true, "_ansible_tmpdir": "/root/.ansible/tmp/ansible-tmp-1705626845.0551057-1083060-265276551058460/", "_ansible_remote_tmp": "~/.ansible/tmp"}}

as you can see, the data: '{"test": "json"}' gets turned into "data": {"test": "json"}

I looked at the built-in ansible copy module to see how the content parameter is implemented - I could not figure it out - I think it copies the data to the remote machine as-is, rather than trying to pass it as a module argument as above. Whatever is happening, it is happening inside Ansible between the invocation of the module, and when the module arguments are formatted.

Note that this works:

    - name: Debug2
      containers.podman.podman_secret:
        name: mysecret3
        state: present
        force: true
        data: "{{ __data | to_json }}"
      vars:
        __data: {test: json}

this is converted to "data": "{\"test\": \"json\"}"
not sure if that helps you - still not sure how to pass a raw, JSON formatted string

[sveno1990]

Thanks for your quick reply and elaborate analsysis.
The to_json results in the secret file being filled with "{\"test\":\"test\"}".
Unfortuneatly our application at this moment cannot deal with the escapes.

[richm]

@sveno1990 are you able to try out #122 ?

[sveno1990]

@richm just tested it, works great!