mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-14 13:32:10 +00:00
Add note about no_log use on vault data retrieve.
When using the ipavault module to retrieve stored data, this data is often sensitive, and if `no_log` is not enabled on the playbook, the sensitive data will be logged by Ansible. This change in de documentation, and playbook examples, suggests the use of `no_log: true` when using `state: retrieved` with ipavault.
This commit is contained in:
@@ -13,5 +13,6 @@
|
||||
password: SomeVAULTpassword
|
||||
state: retrieved
|
||||
register: result
|
||||
no_log: true
|
||||
- debug:
|
||||
msg: "{{ result.vault.data }}"
|
||||
|
||||
Reference in New Issue
Block a user