diff --git a/changelogs/fragments/gitlab_project_variable.yml b/changelogs/fragments/gitlab_project_variable.yml new file mode 100644 index 00000000000..f3db59e129d --- /dev/null +++ b/changelogs/fragments/gitlab_project_variable.yml @@ -0,0 +1,2 @@ +bugfixes: +- Redact GitLab Project variables which might include sensetive information such as password, api_keys and other project related details. diff --git a/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py b/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py index f931d9eb41c..1c9a9f1c242 100644 --- a/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py +++ b/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py @@ -208,7 +208,7 @@ def main(): api_token=dict(type='str', required=True, no_log=True), project=dict(type='str', required=True), purge=dict(type='bool', required=False, default=False), - vars=dict(type='dict', required=False, default=dict()), + vars=dict(type='dict', required=False, default=dict(), no_log=True), state=dict(type='str', default="present", choices=["absent", "present"]) )