ansible/hetzner.hcloud
1
0
Fork 0
mirror of https://github.com/ansible-collections/hetzner.hcloud.git synced 2026-02-04 08:01:49 +00:00
Code Activity

[security] hcloud_certificate, hcloud_server: define no_log values for private_key and ssh_keys parameters (#70)

Browse source 
* hcloud_certificate, hcloud_server: define no_log values for private_key and ssh_keys parameters

* Add changelog fragment
This commit is contained in:
Andrew Klychkov 2021-03-26 10:02:52 +01:00 • committed by GitHub
parent 9f653cb030
commit a05de55f30
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
changelogs/fragments/70-no_log_security_fixes.yml Normal file
View file

@ -0,0 +1,2 @@
security_fixes:
- hcloud_certificate - mark the ``private_key`` parameter as ``no_log`` to prevent potential leaking of secret values (https://github.com/ansible-collections/hetzner.hcloud/pull/70).

2
plugins/modules/hcloud_certificate.py
View file

@ -232,7 +232,7 @@ class AnsibleHcloudCertificate(Hcloud):
id={"type": "int"},
name={"type": "str"},
certificate={"type": "str"},
private_key={"type": "str"},
private_key={"type": "str", "no_log": True},
labels={"type": "dict"},
state={
"choices": ["absent", "present"],

2
plugins/modules/hcloud_server.py
View file

@ -563,7 +563,7 @@ class AnsibleHcloudServer(Hcloud):
location={"type": "str"},
datacenter={"type": "str"},
user_data={"type": "str"},
ssh_keys={"type": "list", "elements": "str"},
ssh_keys={"type": "list", "elements": "str", "no_log": False},
volumes={"type": "list", "elements": "str"},
firewalls={"type": "list", "elements": "str"},
labels={"type": "dict"},