add a vault_kv2_destroy module

[Kloppi313]

SUMMARY

It is not possible to destroy something in vault.
I think a boolean switch would be great:

Adding something like the parameter destroy: True/False with standard false would do the trick.

The context is the wish to destroy an entire secret with all versions while decomissining a host with its saved secrets.

ISSUE TYPE

• Feature Idea

COMPONENT NAME

vault_kv2_delete

ADDITIONAL INFORMATION

- name: Delete all of the secret/mysecret secret.
  community.hashi_vault.vault_kv2_delete:
    url: https://vault:8201
    path: secret/metadata/mysecret
    auth_method: userpass
    username: user
    password: '{{ passwd }}'
    destroy: True
  register: result

[briantist]

Hi @Kloppi313 , destroy was discussed a little bit in the PR for vault_kv2_delete

• Add vault_kv2_delete module #304

I think I'd rather see this as its own module, vault_kv2_destroy. The reason is mainly that it is a different functionality from deletes, so it should be separate, and it will be easier to test each module on its own that way.

It's currently waiting for a contributor to implement it though.

[Kloppi313]

Hi @briantist,

so would you prefer renaming this issue?
Wouldn't it be a good start to duplicate vault_kv2_delete module and changing everything to destroy for a naive start?

[briantist]

Sure, I've renamed this issue. Starting from vault_kv2_delete is fine, we don't have a "template" so I usually start with some existing content when creating a new one anyway. If you'd like to take this on please feel free to submit a PR!

[Kloppi313]

I created a PR, but it is not what I firstly had in mind -> removing a complete endpoint, not only to destroy versions. But hey, it is a new feature.

[octavian2204]

maybe instead of creating a separate module would be wiser to add state: present/absent/destroy to existing ones?