From b125ce5f11e4bc4c2edc983e5a8222056fe76cab Mon Sep 17 00:00:00 2001 From: Gael Chamoulaud Date: Mon, 14 Oct 2019 12:47:35 +0200 Subject: [PATCH] Hide sensitive data from Ansible run and logging Change-Id: I2b945b7e5125629b0a70c75a62179dc4ce64c66f Signed-off-by: Gael Chamoulaud --- roles/node-disks/tasks/main.yml | 1 + .../openshift-on-openstack/tasks/openshift-hw-requirements.yaml | 1 + .../openshift-on-openstack/tasks/openshift-nw-requirements.yaml | 1 + roles/switch-vlans/tasks/main.yml | 1 + 4 files changed, 4 insertions(+) diff --git a/roles/node-disks/tasks/main.yml b/roles/node-disks/tasks/main.yml index ce1ca56cc..8aa9cc9ad 100644 --- a/roles/node-disks/tasks/main.yml +++ b/roles/node-disks/tasks/main.yml @@ -14,6 +14,7 @@ section: inspector key: password register: ironic_password + no_log: true - name: Check node disks node_disks: diff --git a/roles/openshift-on-openstack/tasks/openshift-hw-requirements.yaml b/roles/openshift-on-openstack/tasks/openshift-hw-requirements.yaml index 05ba8fc60..1689c683d 100644 --- a/roles/openshift-on-openstack/tasks/openshift-hw-requirements.yaml +++ b/roles/openshift-on-openstack/tasks/openshift-hw-requirements.yaml @@ -26,6 +26,7 @@ return_content: yes status_code: 201 register: keystone_result + no_log: true when: overcloud_keystone_url|default('') - name: Set auth token diff --git a/roles/openshift-on-openstack/tasks/openshift-nw-requirements.yaml b/roles/openshift-on-openstack/tasks/openshift-nw-requirements.yaml index 606bc6f3c..a351a1332 100644 --- a/roles/openshift-on-openstack/tasks/openshift-nw-requirements.yaml +++ b/roles/openshift-on-openstack/tasks/openshift-nw-requirements.yaml @@ -39,6 +39,7 @@ return_content: yes status_code: 201 register: keystone_result + no_log: true when: overcloud_keystone_url|default('') - name: Set auth token diff --git a/roles/switch-vlans/tasks/main.yml b/roles/switch-vlans/tasks/main.yml index 5ef801b0b..f80d2c214 100644 --- a/roles/switch-vlans/tasks/main.yml +++ b/roles/switch-vlans/tasks/main.yml @@ -14,6 +14,7 @@ section: swift key: password register: password + no_log: true - name: Check that switch vlans are present if used in nic-config files switch_vlans: