service-rabbitmq: do not log password (use no_log)

Change-Id: I68a40bebc174e8ebdaea36a0689b34cadb9009d2 Closes-bug: #1865840
2020-03-03 09:18:39 +01:00 · 2020-03-03 09:18:39 +01:00 · b1a4d8848a
commit b1a4d8848a
parent ef1121de29
2 changed files with 6 additions and 0 deletions
--- a/ansible/roles/service-rabbitmq/tasks/main.yml
+++ b/ansible/roles/service-rabbitmq/tasks/main.yml
@ -33,6 +33,7 @@
      until: service_rabbitmq_result is success
      retries: "{{ service_rabbitmq_retries }}"
      delay: "{{ service_rabbitmq_delay }}"
+      no_log: True

  become: true
  when: service_rabbitmq_when | bool
--- a/releasenotes/notes/bug-1865840-0eaf86121988a0d8.yaml
+++ b/releasenotes/notes/bug-1865840-0eaf86121988a0d8.yaml
@ -0,0 +1,5 @@
+---
+security:
+  - |
+    Fixes leak of RabbitMQ password into Ansible logs.
+    `LP#1865840 <https://bugs.launchpad.net/kolla-ansible/+bug/1865840>`__