Add Support for Retrieving Specific Secret Versions in Keeper Ansible Collection

[sascha-es]

I am currently using the Keeper Ansible collection (keeper_get and keeper_lookup modules) to manage secrets in my automation workflows, and I have a feature request that would significantly enhance its functionality and utility.

Feature Request: I would like to request the following enhancements to both the keeper_get and keeper_lookup modules:

A version parameter to allow retrieving a specific version of a secret.
A method to list all existing versions of a secret, providing details such as version numbers, timestamps, and other metadata.
Use Case: In my workflow, I manage password rotation across systems and need to ensure all systems have transitioned to the latest password. This process requires:

Access to older passwords, which may not necessarily be the immediate previous version but potentially versions from further back.
The ability to list all available versions of a secret to identify and retrieve specific historical versions for validation and debugging purposes.
These capabilities are essential for maintaining compatibility during transitions, auditing changes, and ensuring no system is left with an outdated or incorrect password.

Proposed Implementation:

Introduce a version parameter to both the keeper_get and keeper_lookup modules, allowing users to specify which version of a secret to retrieve.
Provide a method, either within the existing modules or as a new module, to list all available versions of a secret. This listing should include metadata such as:
Version number
Timestamp of the version
Additional relevant details for auditing or selection.

Benefits:

Enhances workflows involving password rotation by ensuring older passwords can be accessed for compatibility during transitions.
Facilitates compliance and auditing by exposing historical secret versions.
Provides greater flexibility for debugging and validation in complex automation environments.
Current Limitation: At present, the keeper_get and keeper_lookup modules only retrieve the latest version of a secret. There is no way to programmatically access older versions or list all versions of a secret, creating challenges in workflows that require these capabilities.

I believe these enhancements would make the Keeper Ansible collection more robust and versatile for teams managing secrets in dynamic and regulated environments.

Please let me know if additional details or clarifications are needed. I look forward to your feedback and hope these features can be considered for future updates.

Best regards,
Sascha