Skip to content

Commit af44dd0

Browse files
stuggiclaude
authored andcommitted
[manage_secrets] Add no_log to debug task printing secret content
The debug task for _secret_content prints sensitive values (pull secrets, CI tokens, kubeconfig) to stdout and ansible.log without no_log. The copy task in the same file correctly uses no_log — the debug task was missed. Uses the same cifmw_nolog pattern as the rest of the role to allow disabling for debugging when needed. Jira: OSPRH-31754 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Martin Schuppert <mschuppert@redhat.com>
1 parent 1e5d7b0 commit af44dd0

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

roles/manage_secrets/tasks/_push_secret.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@
2323
var: _secret_file
2424

2525
- name: Debug _secret_content
26+
no_log: "{{ cifmw_nolog | default(true) | bool }}"
2627
ansible.builtin.debug:
2728
var: _secret_content
2829

0 commit comments

Comments
 (0)