It's not "printing the content", it's logging loop items. You'll want to move the sensitive data into dictionaries and use with_dict, or iterate over list indexes with with_sequence.
It would be nice if Ansible somehow marked sensitive data, but it's not doing it now. James Cammarata <[email protected]> napisał: >Hi James, > >Could you open a github issue for this so we can keep track of it? In >the >mean time, you can use the `no_log: yes` option on a per-task basis to >ensure sensitive information is not logged. > >Thanks! > >On Mon, Feb 9, 2015 at 12:20 PM, James Morgan <[email protected]> >wrote: > >> Hi, >> >> I have some sensitive data (keys and pass files etc) stored in yaml >var >> files and encrypted with the vault. >> >> Just noticed that if I have -v set it prints out the contents when I >> import the var files. >> >> I would have expected the facts to know that the file its loading was >from >> the vault and the contents should not be logged >> >> >> TASK: [user-builder | Add builder public key to authorized_keys for >> deployment of code to jump servers] *** >> changed: [localhost] => (item=ssh-rsa >> >AAAAB3NzaC1yc2EAAAABIwAAAQEA3ed3cnj1HNPS60Hazeilt3yA8Doljw+zlhlDsvd30k3pPkmudlD+ZNNEoo2hNluUVZnlQX+ej9qUpz/uTK8cx9o5MgcyWIpJRAhsm2DKjjQxGQxiNyi3cAAAAB3NzaC1yc2EAAAABIwAAAQEA3ed3cnj1HNkmudlD+ZNNEoo2hNluUVZnlQX+ej9qUpz/uTK8cx9o5MgcyWIpJRAhsm2DKjjQxGQxiNyi3ccAruWODdu8/9+VzWLEHsOH3GnSTsJ2+ULTvvhnjDAjeTwiPC05pwgZbdgg+nuvVV7q919v8n/1NNUVY9Kw3RUGHq36MoyvYwzb6hA5UoN/3MjqoXGn", >> "key_options": null, "keyfile": >"....../builder/.ssh/authorized_keys", >> "manage_dir": true, "path": null, "state": "present", "unique": >false, >> "user": "builder"} >> >> Thanks >> >> James >> >> -- >> You received this message because you are subscribed to the Google >Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, >send an >> email to [email protected]. >> To post to this group, send email to >[email protected]. >> To view this discussion on the web visit >> >https://groups.google.com/d/msgid/ansible-project/5c6648fb-6b06-46bc-b4ce-26853d938533%40googlegroups.com >> ><https://groups.google.com/d/msgid/ansible-project/5c6648fb-6b06-46bc-b4ce-26853d938533%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > >-- >You received this message because you are subscribed to the Google >Groups "Ansible Project" group. >To unsubscribe from this group and stop receiving emails from it, send >an email to [email protected]. >To post to this group, send email to [email protected]. >To view this discussion on the web visit >https://groups.google.com/d/msgid/ansible-project/CAMFyvFgmYQ7mjZaZvXTZdgkfEtVE26FZkm3TR4LEszBOuZrbXA%40mail.gmail.com. >For more options, visit https://groups.google.com/d/optout. -- Wysłane za pomocą K-9 Mail. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/bc67c759-2cd0-401f-97d5-49982b9f1783%40email.android.com. For more options, visit https://groups.google.com/d/optout.
