Comment 0 for bug 1998158

Revision history for this message
Takashi Kajinami (kajinamit) wrote :

Description
===========
Currently the "Check password for Keystone user" task dumps raw password strings
in case the user is not yet created (or has a different password).

2022-11-28 16:08:38.471435 | fa163e7e-724d-ab58-6e4c-000000004537 | FATAL | Check password of Keystone user | undercloud | item=cinder | error={"ansible_loop_var": "tripleo_keystone_resources_data", ..., "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1, "tripleo_keystone_resources_data": {"cinder": {"password": "d5bsb9TKXiOFO4XHJb2XYbra4", "roles": ["admin", "service"]}}}

We should hide such sensitive information from ansible log.

Steps to reproduce
==================
* Deploy standalone
* See deployment output

Expected result
===============
* Output does not contain the raw password string

Actual result
=============
* Output contains the raw password string

Environment
===========
N/A

Logs & Configs
==============
Example:
https://d1079d1c172c6ec8daf9-8011a2266d21f0c09baf1c83d6d5002e.ssl.cf2.rackcdn.com/856228/4/check/tripleo-ci-centos-9-standalone/e4d5674/logs/undercloud/home/zuul/standalone_deploy.log