Explorar o código

Stop logging AWS credentials in master role.

Using lineinfile and with_items, the items end up logged and in this
case include AWS credentials.

Simple us of no_log to hide them.
Devan Goodwin %!s(int64=8) %!d(string=hai) anos
pai
achega
f886b0ba6a
Modificáronse 1 ficheiros con 1 adicións e 0 borrados
  1. 1 0
      roles/openshift_master/tasks/systemd_units.yml

+ 1 - 0
roles/openshift_master/tasks/systemd_units.yml

@@ -90,6 +90,7 @@
     dest: /etc/sysconfig/{{ openshift.common.service_type }}-master-api
     dest: /etc/sysconfig/{{ openshift.common.service_type }}-master-api
     line: "{{ item }}"
     line: "{{ item }}"
   with_items: "{{ master_api_aws.stdout_lines | default([]) }}"
   with_items: "{{ master_api_aws.stdout_lines | default([]) }}"
+  no_log: True
 
 
 - name: Preserve Master Controllers Proxy Config options
 - name: Preserve Master Controllers Proxy Config options
   command: grep PROXY /etc/sysconfig/{{ openshift.common.service_type }}-master-controllers
   command: grep PROXY /etc/sysconfig/{{ openshift.common.service_type }}-master-controllers