Skip to content
Permalink
Browse files

Be more cautious when printing values in full debug mode.

Anything with the substring `password` or `secret` in it is now
replaced by asterisks.
  • Loading branch information...
riccardomurri committed Mar 11, 2019
1 parent fb32cf9 commit 95a7b4d60d3f7c5ec3ae3b988eef1cd3ac5b38f4
Showing with 1 addition and 1 deletion.
  1. +1 −1 elasticluster/providers/ansible_provider.py
@@ -299,7 +299,7 @@ def _run_playbook(self, cluster, playbook, extra_args):
"Calling `ansible-playbook` with the following environment:")
for var, value in sorted(ansible_env.items()):
# sanity check. Do not print password content....
if "password" in var.lower():
if "password" in var.lower() or "secret" in var.lower():
elasticluster.log.debug("- %s=******", var)
else:
elasticluster.log.debug("- %s=%r", var, value)

0 comments on commit 95a7b4d

Please sign in to comment.
You can’t perform that action at this time.