conjur_variable lookup plugin can be improved

[izgeri]

• The documentation of CyberArk lookup plugin: https://docs.ansible.com/ansible/latest/plugins/lookup/conjur_variable.html
  • doesn’t have any author
  • mentions https://developer.conjur.net/key_concepts/machine_identity.html (note - this was fixed in Update conjur_variable.py ansible/ansible#66763, but additional work might need to be done to propagate it properly to production)
  • shows environment variables that cannot be used by the lookup plugin
  • doesn’t have any example for /etc/conjur.conf and /etc/conjur.identity files
• The lookup plugin cannot be configured using environment variables
• The host login in the /etc/conjur.identify file needs to be encoded (replacing / by %2F)

  machine https://dap-master/authn  
  login host%2Fdev%2Fansible%2Fhelloworld-project  
  password <API_KEY>
  

• The lookup plugin doesn’t provide an option to use self-signed certificates

[izgeri]

If needed, this can be broken up into multiple issues. tracking it here since we don't have an issue tracker for the conjur_variable plugin (since it's built into the core), but if it'd be better to track elsewhere (in the core issues?), please feel free to move it.