From 0ec0e2053432b691b82df518bf3d8262a56d2b45 Mon Sep 17 00:00:00 2001
From: Lars Beckers <lars.beckers@rwth-aachen.de>
Date: Thu, 1 Jun 2017 13:12:08 +0200
Subject: [PATCH] ensure no passwords are logged
---
mysql/tasks/main.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/mysql/tasks/main.yml b/mysql/tasks/main.yml
index 5af6629..f6ba3dc 100644
--- a/mysql/tasks/main.yml
+++ b/mysql/tasks/main.yml
@@ -32,6 +32,7 @@
- name: get or create the mysql root password
local_action: pass name="db/{{ ansible_hostname }}-mysql" state=present generate=20 store=FSMPI_PASSWORD_STORE_DIR limit=yes
register: mysql_root_password
+ no_log: True
tags:
- password
- mysql
@@ -43,6 +44,7 @@
login_user: root
login_password: "{{ mysql_root_password.password }}"
register: mysql_root_creation_result
+ no_log: True
ignore_errors: yes
tags:
- mysql
@@ -52,6 +54,7 @@
mysql_user:
name: root
password: "{{ mysql_root_password.password }}"
+ no_log: True
when: mysql_root_creation_result|failed
tags:
- mysql
--
GitLab