Skip to content
  • Rafael Guterres Jeffman's avatar
    Bypass Ansible filtering on data returned by the module. · 88f84cef
    Rafael Guterres Jeffman authored
    Due to Ansible filtering out values in the output that might be match
    values in sensible attributes that have `no_log` set, if a module need
    to return data to the controller, it cannot rely on
    `ansible_module.exit_json` if there is a chance that a partial match
    may occur.
    
    See: https://github.com/ansible/ansible/issues/71789
    
    The change provided here uses the same implementation that is used on
    Ansible's `AnsibleModule.exit_json`, without the data filtering layer,
    so every attribute with be printed and, therefore, logged by Ansible.
    
    This is needed for the Vault module, as we need to return values that
    are explicit requested by the user and that might, at least partially,
    match the values in attributes with `no_log` set.
    
    Tests that reproduced the issue, and show it was fixed were provided
    for all Vault types.
    88f84cef
Loading