From 6b4b2d5381b1377d860106cda97d762500329e08 Mon Sep 17 00:00:00 2001
From: Toshio Kuratomi <a.badger@gmail.com>
Date: Tue, 24 Apr 2018 17:30:41 -0700
Subject: [PATCH] Add note about the dangers of ANSIBLE_DEBUG (#39261)

* Add note about the dangers of ANSIBLE_DEBUG

* Wording tweaks

(cherry picked from commit 72456711c3b9e0a543a39c66199cc4881eb9cf50)
---
 lib/ansible/config/base.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/lib/ansible/config/base.yml b/lib/ansible/config/base.yml
index 7a70f03d2b0..ef3318a6d15 100644
--- a/lib/ansible/config/base.yml
+++ b/lib/ansible/config/base.yml
@@ -485,7 +485,11 @@ DEFAULT_CONNECTION_PLUGIN_PATH:
 DEFAULT_DEBUG:
   name: Debug mode
   default: False
-  description: Toggles debug output in Ansible, VERY verbose and can hinder multiprocessing.
+  description:
+    - "Toggles debug output in Ansible. This is *very* verbose and can hinder
+      multiprocessing.  Debug output can also include secret information
+      despite no_log settings being enabled, which means debug mode should not be used in 
+      production."
   env: [{name: ANSIBLE_DEBUG}]
   ini:
   - {key: debug, section: defaults}