Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passwords not masked in playbook output #362

Open
minatoyama opened this issue Mar 4, 2025 · 0 comments
Open

Passwords not masked in playbook output #362

minatoyama opened this issue Mar 4, 2025 · 0 comments

Comments

@minatoyama
Copy link

In my ansible configuration we either use Ansible Vault or a gpg plugin to encrypt passwords. However these passwords are fully printed in clear text in some of the configuration steps, even if they are skipped. Some examples:

  • icinga.icinga.icinga2 : enable features
  • icinga.icinga.icingaweb2 : Check each icingaweb2_modules key against known modules
  • icinga.icinga.icingaweb2 : Configure modules
  • icinga.icinga.icingaweb2 : Manage enabled module daemons

Example of output in skipped task:

 TASK [icinga.icinga.icingaweb2 : Manage enabled module daemons] **********************************************************************************************************************************
skipping: [icingaweb2] => (item={'key': 'icingadb', 'value': {'enabled': True, 'source': 'package', 'commandtransports': {'icingadb-web': {'transport': 'api', 'host': 'icingaweb2', 'username': 'api-user', 'password': 'api password in clear text'}}, 'config': {'icingadb': {'resource': 'icingadb-database'}, 'redis': {'tls': 0}}, 'redis': {'redis1': {'host': 'master1', 'password': 'redis password in clear text'}, 'redis2': {'host': 'master2', 'password': 'redis password in clear text'}}}})
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant