From 23e024e5a0dec6f6673167c68de96b3dd50a13f5 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Evrard Date: Wed, 11 Apr 2018 13:36:03 +0200 Subject: [PATCH] Do not log passwords This prevents data to be leaked into the callback plugin. Change-Id: I7fce6153cfbdc33c12421b1b78458d49b962f8e8 (cherry picked from commit 2a80a325495e369eb4fcb3ba791d1e1ac28548f4) --- playbooks/common-tasks/mysql-db-user.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/playbooks/common-tasks/mysql-db-user.yml b/playbooks/common-tasks/mysql-db-user.yml index 237140f347..a36ae721fc 100644 --- a/playbooks/common-tasks/mysql-db-user.yml +++ b/playbooks/common-tasks/mysql-db-user.yml @@ -21,6 +21,7 @@ name: "{{ db_name }}" state: "present" delegate_to: "{{ groups['galera_all'][0] }}" + no_log: True tags: - common-mysql @@ -37,5 +38,6 @@ append_privs: "{{ db_append_privs | default(omit) }}" delegate_to: "{{ groups['galera_all'][0] }}" with_items: "{{ grant_list | default(['localhost', '%']) }}" + no_log: True tags: - common-mysql