In linux modules you can specify a parameter as no_log like this:
module = AnsibleModule(
argument_spec = dict(
host=dict(default=“localhost”),
user=dict(required=True),
password=dict(required=True, no_log=True),
)
)
Is there an equivalent for windows modules? We have a module that installs certificates but currently the password is included in the stdout. We aggregate our ansible logs so this isn’t really acceptable for our use case. I took a look at
https://github.com/ansible/ansible/blob/devel/lib/ansible/module_utils/powershell.ps1
https://github.com/ansible/ansible/blob/eb1214baad0cbe2c4b7304caebb9ae1c7dc0d8db/lib/ansible/modules/windows/win_psexec.ps1
And don’t see any examples of this. I could no_log the whole task but then any failure becomes problematic to troubleshoot or return any data.