diff --git a/plugins/modules/podman_container.py b/plugins/modules/podman_container.py index 96f547d..9b684b6 100644 --- a/plugins/modules/podman_container.py +++ b/plugins/modules/podman_container.py @@ -674,7 +674,9 @@ options: type: bool secrets: description: - - Add the named secrets into the container at /run/secrets. + - Add the named secrets into the container. + The format is C(secret[,opt=opt...]), see + L(documentation,https://docs.podman.io/en/latest/markdown/podman-run.1.html#secret-secret-opt-opt) for more details. type: list elements: str security_opt: diff --git a/tests/integration/targets/podman_secret/tasks/main.yml b/tests/integration/targets/podman_secret/tasks/main.yml index 8c00e74..5c97c3e 100644 --- a/tests/integration/targets/podman_secret/tasks/main.yml +++ b/tests/integration/targets/podman_secret/tasks/main.yml @@ -42,15 +42,27 @@ rm: true register: container - - name: Output secret data - debug: - msg: '{{ container.stdout }}' - - name: Check secret data assert: that: - container.stdout == "super secret content" + - name: Create container that uses secret with options + containers.podman.podman_container: + name: showmysecret + image: alpine:3.7 + secrets: + - mysecret,type=env,target=SECRET + command: ['/bin/sh', '-c', 'echo $SECRET'] + detach: false + rm: true + register: container + + - name: Check secret data + assert: + that: + - container.stdout == "super secret content\n" + - name: Remove secret containers.podman.podman_secret: state: absent