From 84b68aa05feb6af91731c75ad0fa04264235e751 Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde Date: Fri, 17 Jan 2020 12:12:15 +0530 Subject: [PATCH] gitlab_project_variable: Remove sensitive information (#66556) Redact GitLab Project variables which might include sensetive information such as password, api_keys and other project related details. Signed-off-by: Abhijeet Kasurde --- changelogs/fragments/gitlab_project_variable.yml | 2 ++ .../modules/source_control/gitlab/gitlab_project_variable.py | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 changelogs/fragments/gitlab_project_variable.yml diff --git a/changelogs/fragments/gitlab_project_variable.yml b/changelogs/fragments/gitlab_project_variable.yml new file mode 100644 index 00000000000..f3db59e129d --- /dev/null +++ b/changelogs/fragments/gitlab_project_variable.yml @@ -0,0 +1,2 @@ +bugfixes: +- Redact GitLab Project variables which might include sensetive information such as password, api_keys and other project related details. diff --git a/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py b/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py index f931d9eb41c..1c9a9f1c242 100644 --- a/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py +++ b/lib/ansible/modules/source_control/gitlab/gitlab_project_variable.py @@ -208,7 +208,7 @@ def main(): api_token=dict(type='str', required=True, no_log=True), project=dict(type='str', required=True), purge=dict(type='bool', required=False, default=False), - vars=dict(type='dict', required=False, default=dict()), + vars=dict(type='dict', required=False, default=dict(), no_log=True), state=dict(type='str', default="present", choices=["absent", "present"]) )