internet/community.general
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-05-07 22:02:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

docker swarm - Add no_log to the signing_ca_key argument (#1728)

Browse Source 
This will prevent accidental disclosure.

See: CVE-2021-20191
This commit is contained in:
David Moreau Simard
2021-02-04 15:17:43 -05:00
committed by GitHub
parent b7368b9802
commit 9cccc9f0cd
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
changelogs/fragments/CVE-2021-20191_no_log_docker.yml Normal file
View File

@@ -0,0 +1,2 @@
security_fixes:
- docker_swarm - enabled ``no_log`` for the option ``signing_ca_key`` to prevent accidental disclosure (CVE-2021-20191, https://github.com/ansible-collections/community.general/pull/1728).

2
plugins/modules/cloud/docker/docker_swarm.py
View File

@@ -616,7 +616,7 @@ def main():
name=dict(type='str'), name=dict(type='str'),
labels=dict(type='dict'), labels=dict(type='dict'),
signing_ca_cert=dict(type='str'), signing_ca_cert=dict(type='str'),
signing_ca_key=dict(type='str'), signing_ca_key=dict(type='str', no_log=True),
ca_force_rotate=dict(type='int'), ca_force_rotate=dict(type='int'),
autolock_managers=dict(type='bool'), autolock_managers=dict(type='bool'),
node_id=dict(type='str'), node_id=dict(type='str'),