浏览代码

Stop logging AWS credentials in master role.

Using lineinfile and with_items, the items end up logged and in this
case include AWS credentials.

Simple us of no_log to hide them.
Devan Goodwin 8 年之前
父节点
当前提交
f886b0ba6a
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      roles/openshift_master/tasks/systemd_units.yml

+ 1 - 0
roles/openshift_master/tasks/systemd_units.yml

@@ -90,6 +90,7 @@
     dest: /etc/sysconfig/{{ openshift.common.service_type }}-master-api
     line: "{{ item }}"
   with_items: "{{ master_api_aws.stdout_lines | default([]) }}"
+  no_log: True
 
 - name: Preserve Master Controllers Proxy Config options
   command: grep PROXY /etc/sysconfig/{{ openshift.common.service_type }}-master-controllers