Brian Scholer

Hi @chrisdola thanks for opening this feature request. A PR for a lookup and/or module for unwrapping would be welcome if anyone would like to submit it. In the meantime,...

> Are there any guidelines or requirements when it comes to module functionality that you all are trying to follow? Modules must support the ability to pass in multiple tokens...

Also here are the docs on `hvac`'s unwrap method which you'll be using in the module: - https://hvac.readthedocs.io/en/stable/usage/system_backend/wrapping.html#unwrap

@samdoran that's a good point thanks; there's some context missing in that example which is that I'm re-including the same role, within itself (hence the use of `{{ ansible_role_name }}`)....

@bcoca I actually did look at calling `validate_argument_spec` directly, but it seems like there's no convenient way to give it the `provided_arguments`. When called internally, it looks like that info...

if you pass `provided_arguments` does it replace the task vars (as the values to be validated), or is it purely additional?

so it seems like that's safe if `provided_arguments` don't overlap, but if any of them do then as you said the precedence is backwards (task vars will win)?

@larsks I did include a usage of `basename` in the OP as a workaround, not sure if you meant that, or meant to use it as a fix in the...

Thanks @avoylenko ! I've starred the repo and will continue to keep an eye on it. I appreciate the work you're doing.

Yeah that's an error from Vault and we can't troubleshoot it here, at least not with more information from your Vault server. In the future please post questions like this...