Make filetree_create capable of exporting credential_input_sources

[usa-usa-usa-usa]

Is your feature request related to a problem? Please describe.
Not sure if it is intended or not, but filetree_create does not export associated credential_input_sources when exporting credentials. Interesting enough, filetree_read is capable of ingesting credential input sources.

Describe the solution you'd like
filetree_create should also export credential_input_sources that are associated to the credentials that it exports.

Our use case is that we are moving teams over from one aap instance to another. Most teams are not using IaC, but nearly all are the cyberark credential provider. So we are using this role to hydrate the new instance.

Describe alternatives you've considered
I've considered writing my own playbook that uses the API to export credential input sources that then formats the result in the controller_credential_input_sources format.

[usa-usa-usa-usa]

Here is my workaround for anyone who comes here looking to do the same. It is adapted to specifically how I am using the filetree_create module. We are moving teams over to a new instance, one at a time.

---

- name: Get the organization_filter ID to restrict the API queries
  ansible.builtin.set_fact:
    organization_id: "{{ lookup('ansible.controller.controller_api', 'organizations', query_params={'name': organization_filter}, host=controller_hostname, oauth_token=controller_oauthtoken, verify_ssl=controller_validate_certs).id }}"

- name: Get current Credentials from the API
  ansible.builtin.set_fact:
    credentials_lookvar: "{{ query('ansible.controller.controller_api', 'api/v2/credentials/', query_params=(query_params | combine({'organization': organization_id})) if organization_id
      is defined else query_params, host=controller_hostname, oauth_token=controller_oauthtoken, verify_ssl=controller_validate_certs, return_all=true, max_objects=1000)
      }}"
  vars:
    query_params:
      order_by: organization,id

- name: Extract input_sources into an array
  ansible.builtin.set_fact:
    input_sources_array: "{{ credentials_lookvar | json_query('[*].related.input_sources') }}"

- name: Lookup input_sources details
  ansible.builtin.set_fact:
    input_sources_details: "{{ input_sources_details | default([]) +
      [query('ansible.controller.controller_api', item, host=controller_hostname, oauth_token=controller_oauthtoken, verify_ssl=controller_validate_certs, return_all=true, max_objects=1000)]
      }}"
  loop: "{{ input_sources_array }}"

- name: Template a credential_input_sources file
  ansible.builtin.template:
    src: templates/credential_input_source.j2
    dest: '{{ output_path }}/credential_input_sources.yaml'

...

And here is credential_input_sources.j2 jinja template:

controller_credential_input_sources: {% for sources in input_sources_details %} {% if sources and sources|length >0 %} {% for source in sources %} - target_credential: "{{ source.summary_fields.target_credential.name }}" input_field_name: "{{ source.input_field_name }}" source_credential: "{{ source.summary_fields.source_credential.name }}" metadata: {{ source.metadata | default("") }} description: "{{ source.description }}" state: present {% endfor %} {% endif %} {% endfor %}