Yes, admin & password variables will replace here and those are encrypted using ansible vault
On Monday, April 29, 2019 at 11:53:06 PM UTC-5, Sathya Narayanan wrote: > > Have you tried using vault ? > > On Tue, Apr 30, 2019, 4:34 AM Raj <[email protected] <javascript:>> > wrote: > >> I am running into an issue where ansible is spitting up password, which >> is a security breach as these logs will automatically uploads to developer >> shared location for review. How can I mask the passwords in spitting up >> here. I need to use stdout_lines whether we run the job in clean state or >> not, so I cant take out that from list. >> >> - name: Disabling Queue >> shell: source ~/.bash_profile && sqlplus -S '{{ admin }}/{{ password >> }}@{{ TNS_NAME }}' @"disable.sql" >> register: disable_queue >> delegate_to: localhost >> args: >> chdir: roles/db-deploy/files/ >> tags: Jobs >> >> >> - debug: var=disable_queue.stdout_lines >> delegate_to: localhost >> tags:Jobs >> >> >> >> >> TASK [db-deploy : Disabling Job Queue] ******************** >> 21:46:20 [buildNode1] fatal: [Host1 -> localhost]: FAILED! => {"changed": >> true, "cmd": "source ~/.bash_profile && sqlplus -S >> 'userName/visiblePassword(DESCRIPTION = >> (CONNECT_TIMEOUT=5)(RETRY_COUNT=0)(LOAD_BALANCE = off)(FAILOVER = >> on)(ADDRESS_LIST=(ADDRESS = (PROTOCOL = TCP)(HOST = Host1)(PORT = >> 1521))(ADDRESS = (PROTOCOL = TCP)(HOST = Host1)(PORT = 1521)))(CONNECT_DATA >> = (SERVICE_NAME = serviceName1)))' @\"disable.sql\"", "delta": >> "0:00:00.412873", "end": "2019-04-25 02:46:20.036544", "msg": "non-zero >> return code", "rc": 127, "start": "2019-04-25 02:46:19.623671", "stderr": >> "/bin/sh: >> sqlplus: command not found", "stderr_lines": ["/bin/sh: sqlplus: command >> not found"], "stdout": "", "stdout_lines": []} >> 21:46:20 [buildNode1] fatal: [Host2 -> localhost]: FAILED! => {"changed": >> true, "cmd": "source ~/.bash_profile && sqlplus -S >> 'userName/visiblePassword(DESCRIPTION = >> (CONNECT_TIMEOUT=5)(RETRY_COUNT=0)(LOAD_BALANCE = off)(FAILOVER = >> on)(ADDRESS_LIST= (ADDRESS = (PROTOCOL = TCP)(HOST = Host2)(PORT = >> 1521))(ADDRESS = (PROTOCOL = TCP)(HOST = Host2)(PORT = 1521)))(CONNECT_DATA >> = (SERVICE_NAME = serviceName2)))' @\"disable.sql\"", "delta": >> "0:00:00.419597", "end": "2019-04-25 02:46:20.041097", "msg": "non-zero >> return code", "rc": 127, "start": "2019-04-25 02:46:19.621500", "stderr": >> "/bin/sh: >> sqlplus: command not found", "stderr_lines": ["/bin/sh: sqlplus: command >> not found"], "stdout": "", "stdout_lines": []} >> 21:46:20 [buildNode1] fatal: [Host3 -> localhost]: FAILED! => {"changed": >> true, "cmd": "source ~/.bash_profile && sqlplus -S >> 'userName/visiblePassword(DESCRIPTION = >> (CONNECT_TIMEOUT=5)(RETRY_COUNT=0)(LOAD_BALANCE = off)(FAILOVER = >> on)(ADDRESS_LIST=(ADDRESS = (PROTOCOL = TCP)(HOST = Host3)(PORT = >> 1521))(ADDRESS = (PROTOCOL = TCP)(HOST = Host3)(PORT = 1521)))(CONNECT_DATA >> = (SERVICE_NAME = serviceName3)))' @\"disable.sql\"", "delta": >> "0:00:00.419941", "end": "2019-04-25 02:46:20.054755", "msg": "non-zero >> return code", "rc": 127, "start": "2019-04-25 02:46:19.634814", "stderr": >> "/bin/sh: >> sqlplus: command not found", "stderr_lines": ["/bin/sh: sqlplus: command >> not found"], "stdout": "", "stdout_lines": []} >> >> >> Thanks and Regards >> Raj >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To post to this group, send email to [email protected] >> <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/2c440447-07a0-4025-83db-053cc1454668%40googlegroups.com >> >> <https://groups.google.com/d/msgid/ansible-project/2c440447-07a0-4025-83db-053cc1454668%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/0fc192e9-7312-4424-899c-8bc0237e0c9c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
