diff options
| author | Michal Nasiadka <mnasiadka@gmail.com> | 2026-03-17 06:19:52 +0000 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2026-03-25 19:15:26 +0000 |
| commit | 976d2d85c3d3bc77366bf4c90c03eaa4fa5921fe (patch) | |
| tree | 1710e94a8f116355e4ce476709d314934dcdec88 /tests/run.yml | |
| parent | a91bd2c1d8007bd3e7bc5c00e86e97cb3aace2a8 (diff) | |
| download | kolla-ansible-976d2d85c3d3bc77366bf4c90c03eaa4fa5921fe.tar.gz kolla-ansible-976d2d85c3d3bc77366bf4c90c03eaa4fa5921fe.zip | |
kolla_toolbox: fix secrets leaking
Replace ansible CLI invocation with ansible-runner, passing module
args via put_archive tar stream instead of exec argv.
Override _log_invocation to add no_log values to relevant
variables on module invocation (without that we leak secrets
on each module invocation - check for "Invoked with" syslog entries)
runner_on_skipped is required for --check support
Requires ansible-runner in the kolla_toolbox image (Depends-On).
Depends-On: https://review.opendev.org/c/openstack/kolla/+/980788
Closes-Bug: #2131197
Closes-Bug: #2138622
Assisted-By: Claude Sonnet 4.6
Change-Id: I110f79aa911b746d13f6648883191edabea10563
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
Diffstat (limited to 'tests/run.yml')
0 files changed, 0 insertions, 0 deletions