censor the logs

This commit is contained in:
histausse 2021-09-11 17:33:48 +02:00
parent 0a3b7bf590
commit 3a4d709275
Signed by: histausse
GPG key ID: 67486F107F62E9E9

View file

@ -69,6 +69,7 @@
dest: "/tmp/ansible_hacky_pki_ca.key"
mode: u=rw,g=,o=
delegate_to: localhost
no_log: yes
when: force_renewal or (not key_file.stat.exists) or (not cert_file.stat.exists) or (not validity.valid_at.renewal)
- name: Sign the certificate
@ -91,6 +92,7 @@
owner: "{{ owner | default('root') }}"
group: "{{ group | default('root') }}"
mode: "{{ key_mode | default('u=rw,g=,o=') }}"
no_log: yes
when: force_renewal or (not key_file.stat.exists) or (not cert_file.stat.exists) or (not validity.valid_at.renewal)
- name: Send certificate to the server