Skip to content

fix users password spitted in the logs #271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 16, 2025

Conversation

gionn
Copy link
Contributor

@gionn gionn commented Feb 8, 2025

The recently added task to warn about priv deprecation is spitting the user password in the ansible logs, caused by lack of no_log attribute as in similar tasks using with_items: "{{ postgresql_users }}"

Copy link

This pr has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

@github-actions github-actions bot added the stale label Jun 13, 2025
@gionn
Copy link
Contributor Author

gionn commented Jun 16, 2025

@geerlingguy should be fairly easy to review and technically this is a security issue 🙏🏻

@geerlingguy geerlingguy merged commit 05d3690 into geerlingguy:master Jun 16, 2025
5 checks passed
@gionn gionn deleted the fixup-password-logs branch June 16, 2025 15:29
@gionn
Copy link
Contributor Author

gionn commented Jun 16, 2025

thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants