Ansible question

[Maciej Lasyk]

Wouldn't it be more secure to use Vault here?

Cheers,
Maciej Lasyk

GPG key ID: 4FED49C5
GPG public key: http://maciek.lasyk.info/gpg_maciej_lasyk.asc

On Wed, Jan 28, 2015 at 4:57 PM, Miroslav Suchý <msuchy at redhat.com> wrote:

> I have this ansible snippet:
>   - name: Create users
>     keystone_user:
>       login_user="admin" login_password="{{ ADMIN_PASS }}"
> login_tenant_name="admin"
>       user="{{ item.name }}"
>       email="{{ item.email }}"
>       tenant="{{ item.tenant }}"
>       password="{{ item.password }}"
>       state=present
>     with_items:
>       - { name: kevin, email: 'kevin at fedoraproject.org', tenant:
> infrastructure, password: "{{kevin_password}}" }
>       - { name: laxathom, email: 'laxathom at fedoraproject.org', tenant:
> infrastructure, password: "{{laxathom_password}}" }
>
>
> But when I run it it produce:
> TASK: [Create users]
> **********************************************************
> changed: [fed-cloud09.cloud.fedoraproject.org] => (item={'password':
> u'XXXX', 'name': 'kevin', 'tenant':
> 'infrastructure', 'email': 'kevin at fedoraproject.org'})
>
> changed: [fed-cloud09.cloud.fedoraproject.org] => (item={'password':
> u'XXXX', 'name': 'laxathom', 'tenant':
> 'infrastructure', 'email': 'laxathom at fedoraproject.org'})
>
>
>
> Is there way to mask the output (using -name or something) so the password
> is not print to console?
> --
> Miroslav Suchy, RHCE, RHCDS
> Red Hat, Senior Software Engineer, #brno, #devexp, #fedora-buildsys
> _______________________________________________
> infrastructure mailing list
> infrastructure at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150128/d5de30c4/attachment-0001.html>