[Puppet Users] How do I prevent logging of secure data?

2014-02-24 Thread Larry Fast
By default puppet will report the changes to any files it updates.  If the 
file includes any secure data like passwords or private encryption keys, 
that also shows up in the logs.  Is there any way to block this level of 
logging for individual files?  Disabling it for all files is also 
acceptable.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/917812ed-e42e-4aec-b594-058155034bc3%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] How do I prevent logging of secure data?

2014-02-24 Thread Stefan Schulte
On 24.02.2014 21:13, Larry Fast wrote:
 By default puppet will report the changes to any files it updates.  If
 the file includes any secure data like passwords or private encryption
 keys, that also shows up in the logs.  Is there any way to block this
 level of logging for individual files?  Disabling it for all files is
 also acceptable.

You should be able to generally block it with the `show_diff`
configuration option [1]. It can also be deactivated on a per-file basis
[2] as long as you run a recent version of puppet (according to the
original feature request [3] this has been added in puppet 3.2)


[1] http://docs.puppetlabs.com/references/latest/configuration.html#showdiff
[2]
http://docs.puppetlabs.com/references/latest/type.html#file-attribute-show_diff
[3] http://projects.puppetlabs.com/issues/16412

-Stefan

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/530BBCD2.6080504%40taunusstein.net.
For more options, visit https://groups.google.com/groups/opt_out.