Piotr Milewski 9e8b2c4661 security: hide sensitive auth_password in kolla_container module logs ...

Added no_log=True to the 'common_options' argument in generate_module()
to prevent the auth_password and other sensitive data from being printed
in Ansible logs during container operations. This improves security by
hiding credentials from logs.

This change addresses the issue where auth_password was visible in logs
despite already having no_log=True on the auth_password parameter itself,
because it was nested inside common_options dict without no_log protection.

Closes-Bug: #2120302

Change-Id: I2064f822bda1c2618605ecfb9bf26ad820ccbbf2
Signed-off-by: Piotr Milewski <vurmil@gmail.com>

2025-08-12 07:01:51 +00:00

13 KiB

Raw Blame History

View Raw