Introduce new HideSensitiveLogs parameter

This one toggles the no_log parameter. Directly related to #1873770 in
order to allow a deeper debug within CI.

Change-Id: I27f677467263c0e6cc78d775edff55b3811fec1f
Related-Bug: #1873770
This commit is contained in:
Cédric Jeanneret 2020-04-20 14:02:21 +02:00
parent a74a8cd69b
commit cabed543fa
4 changed files with 12 additions and 5 deletions

View File

@ -62,6 +62,12 @@ parameters:
default: false
description: Whether to run config management (e.g. Puppet) in debug mode.
type: boolean
HideSensitiveLogs:
default: true
type: boolean
description: >
Set it to false if you don't want to activate the no_log feature within
ansible modules.
EnablePuppet:
default: true
description: Whether to run the puppet (baremetal) deployment tasks.
@ -364,6 +370,7 @@ outputs:
enabled_networks: {get_param: EnabledNetworks}
net_vip_map: {get_param: NetVipMap}
nova_additional_cell: {get_param: NovaAdditionalCell}
hide_sensitive_logs: {get_param: HideSensitiveLogs}
{%- for network in networks if network.enabled|default(true) %}
{{network.name_lower}}_net_name: {get_param: {{network.name}}NetName}
{%- endfor %}

View File

@ -70,7 +70,7 @@ outputs:
cert_content: {get_param: SSLCertificate}
chain_content: {get_param: SSLIntermediateCertificate}
key_content: {get_param: SSLKey}
no_log: true
no_log: "{{ hide_sensitive_logs | bool }}"
# We want to ensure we run all this block IFF we have
# a certificate content.
@ -133,7 +133,7 @@ outputs:
# We hence need to do this file creation in two distinct steps
# and ignore failure on the ownership change.
- name: push certificate content
no_log: true
no_log: "{{ hide_sensitive_logs | bool }}"
copy:
dest: "{{cert_path}}"
mode: 0440

View File

@ -85,13 +85,13 @@ outputs:
- name: Generate PSK
command: openssl rand -base64 48
register: generated_psk
no_log: true
no_log: "{{ hide_sensitive_logs | bool }}"
- name: generate ipsec global vars
set_fact:
ipsec_psk: "{{ generated_psk.stdout }}"
delegate_to: "{{item}}"
delegate_facts: true
no_log: true
no_log: "{{ hide_sensitive_logs | bool }}"
with_items:
- "{{ groups.ipsec }}"
deploy_steps_tasks:

View File

@ -239,7 +239,7 @@ outputs:
- name: Set FreeIPA OTP fact
set_fact:
ipa_otp: {get_param: NovajoinIpaOtp}
no_log: true
no_log: "{{ hide_sensitive_logs | bool }}"
- name: create persistent directories
file:
path: "{{ item.path }}"