Merge "Introduce new HideSensitiveLogs parameter"

common/deploy-steps.j2

@@ -62,6 +62,12 @@ parameters:
     default: false
     description: Whether to run config management (e.g. Puppet) in debug mode.
     type: boolean
+  HideSensitiveLogs:
+    default: true
+    type: boolean
+    description: >
+      Set it to false if you don't want to activate the no_log feature within
+      ansible modules.
   EnablePuppet:
     default: true
     description: Whether to run the puppet (baremetal) deployment tasks.
@@ -364,6 +370,7 @@ outputs:
         enabled_networks: {get_param: EnabledNetworks}
         net_vip_map: {get_param: NetVipMap}
         nova_additional_cell: {get_param: NovaAdditionalCell}
+        hide_sensitive_logs: {get_param: HideSensitiveLogs}
 {%- for network in networks if network.enabled|default(true) %}
         {{network.name_lower}}_net_name: {get_param: {{network.name}}NetName}
 {%- endfor %}

deployment/haproxy/haproxy-public-tls-inject.yaml

@@ -70,7 +70,7 @@ outputs:
             cert_content: {get_param: SSLCertificate}
             chain_content: {get_param: SSLIntermediateCertificate}
             key_content: {get_param: SSLKey}
-          no_log: true
+          no_log: "{{ hide_sensitive_logs | bool }}"
 
         # We want to ensure we run all this block IFF we have
         # a certificate content.
@@ -133,7 +133,7 @@ outputs:
             # We hence need to do this file creation in two distinct steps
             # and ignore failure on the ownership change.
             - name: push certificate content
-              no_log: true
+              no_log: "{{ hide_sensitive_logs | bool }}"
               copy:
                 dest: "{{cert_path}}"
                 mode: 0440

deployment/ipsec/ipsec-baremetal-ansible.yaml

@@ -85,13 +85,13 @@ outputs:
           - name: Generate PSK
             command: openssl rand -base64 48
             register: generated_psk
-            no_log: true
+            no_log: "{{ hide_sensitive_logs | bool }}"
           - name: generate ipsec global vars
             set_fact:
               ipsec_psk: "{{ generated_psk.stdout }}"
             delegate_to: "{{item}}"
             delegate_facts: true
-            no_log: true
+            no_log: "{{ hide_sensitive_logs | bool }}"
             with_items:
             - "{{ groups.ipsec }}"
       deploy_steps_tasks:

deployment/nova/novajoin-container-puppet.yaml

@@ -239,7 +239,7 @@ outputs:
         - name: Set FreeIPA OTP fact
           set_fact:
             ipa_otp: {get_param: NovajoinIpaOtp}
-          no_log: true
+          no_log: "{{ hide_sensitive_logs | bool }}"
         - name: create persistent directories
           file:
             path: "{{ item.path }}"