mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-14 05:22:05 +00:00
c6cb7216ac
When using the ipavault module to retrieve stored data, this data is often sensitive, and if `no_log` is not enabled on the playbook, the sensitive data will be logged by Ansible. This change in de documentation, and playbook examples, suggests the use of `no_log: true` when using `state: retrieved` with ipavault.
19 lines
424 B
YAML
19 lines
424 B
YAML
---
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: no
|
|
gather_facts: no
|
|
|
|
tasks:
|
|
- name: Retrieve data from assymetric vault with a private key file.
|
|
ipavault:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: asymvault
|
|
username: user01
|
|
private_key_file: private.pem
|
|
state: retrieved
|
|
register: result
|
|
no_log: true
|
|
- debug:
|
|
msg: "Data: {{ result.vault.data }}"
|