mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-14 13:32:10 +00:00
c6cb7216ac
When using the ipavault module to retrieve stored data, this data is often sensitive, and if `no_log` is not enabled on the playbook, the sensitive data will be logged by Ansible. This change in de documentation, and playbook examples, suggests the use of `no_log: true` when using `state: retrieved` with ipavault.
19 lines
390 B
YAML
19 lines
390 B
YAML
---
|
|
- name: Tests
|
|
hosts: ipaserver
|
|
become: no
|
|
gather_facts: no
|
|
|
|
tasks:
|
|
- name: Retrieve data from symmetric vault.
|
|
ipavault:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: symvault
|
|
username: admin
|
|
password: SomeVAULTpassword
|
|
state: retrieved
|
|
register: result
|
|
no_log: true
|
|
- debug:
|
|
msg: "{{ result.vault.data }}"
|