Sensitive key data now hidden in output log

Fixes: #6529

Signed-off-by: Neelaksh Singh <neelaksh48@gmail.com>
(cherry picked from commit d18a9860cd)
pull/6707/head v4.0.61
Neelaksh Singh 2021-05-20 02:04:02 -04:00 committed by Guillaume Abrioux
parent f0cd3c4f48
commit 5213612eaf
13 changed files with 18 additions and 0 deletions

View File

@ -52,6 +52,7 @@
- cephx | bool
- keys | length > 0
- inventory_hostname == groups.get('_filtered_clients') | first
no_log: true
- name: slurp client cephx key(s)
slurp:
@ -63,6 +64,7 @@
- cephx | bool
- keys | length > 0
- inventory_hostname == groups.get('_filtered_clients') | first
no_log: true
- name: pool related tasks
when:
@ -170,3 +172,5 @@
group: "{{ ceph_uid }}"
with_items: "{{ hostvars[groups['_filtered_clients'][0]]['slurp_client_keys']['results'] }}"
when: not item.get('skipped', False)
no_log: true

View File

@ -22,4 +22,5 @@
with_items: "{{ _client_keys.results }}"
when:
- item.item.copy_key | bool
no_log: true
when: cephx | bool

View File

@ -50,6 +50,7 @@
owner: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
group: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
mode: "{{ ceph_keyring_permissions }}"
no_log: true
- name: start ceph-crash daemon
when: containerized_deployment | bool

View File

@ -21,6 +21,7 @@
when:
- cephx | bool
- item.item.copy_key | bool
no_log: true
- name: add mgr ip address to trusted list with dashboard - ipv4
set_fact:

View File

@ -33,3 +33,5 @@
when:
- cephx | bool
- item.item.copy_key | bool
no_log: true

View File

@ -74,6 +74,7 @@
- cephx | bool
- item is not skipped
- item.item.copy_key | bool
no_log: true
- name: set mgr key permissions
file:

View File

@ -75,6 +75,7 @@
when:
- not item.0.get('skipped', False)
- item.0.item.name == 'client.' + ceph_nfs_ceph_user or item.0.item.name == rgw_client_name
no_log: true
- name: include start_nfs.yml
import_tasks: start_nfs.yml

View File

@ -32,6 +32,7 @@
when:
- cephx | bool
- item.item.copy_key | bool
no_log: true
when: groups.get(mon_group_name, []) | length > 0
- name: dbus related tasks

View File

@ -69,6 +69,7 @@
when:
- cephx | bool
- item.item.copy_key | bool
no_log: true
- name: nfs object gateway related tasks
when: nfs_obj_gw | bool

View File

@ -35,3 +35,5 @@
- cephx | bool
- item is not skipped
- item.item.copy_key | bool
no_log: true

View File

@ -119,6 +119,7 @@
- "{{ _osp_keys.results }}"
- "{{ groups[mon_group_name] }}"
delegate_to: "{{ item.1 }}"
no_log: true
when:
- cephx | bool
- openstack_config | bool

View File

@ -22,6 +22,7 @@
when:
- cephx | bool
- item.item.copy_key | bool
no_log: true
- name: create rbd-mirror keyring
command: >

View File

@ -32,3 +32,4 @@
- cephx | bool
- item is not skipped
- item.item.copy_key | bool
no_log: true