-
Story
-
Resolution: Done
-
Major
-
RH294 - RHEL9.0-en-1-20221012, RH294 - RHEL 8.4 1 20210818, RH294 - RHEL 8 1 20190531
-
None
-
3
-
en-US (English)
URL:
Reporter RHNID:
Section: -
Language: en-US (English)||||||||
Workaround:
Description: Secrets can be exposed in the output for multiple reasons (like adjusting verbosity, logging into the file, ....).
The way to deal with that problem is to tell students to user no_log: true in such situation.
I suggest to just copy&paste from https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-keep-secret-data-in-my-playbook
If you have a task that you don’t want to show the results or command given to it when using -v (verbose) mode, the following task or playbook attribute can be useful:
- name: secret task shell: /usr/bin/do_something --value={{ secret_value }} no_log: True
and include the link.