From 30c619d1bc8938ea2177fdc21e503808dbe0cca7 Mon Sep 17 00:00:00 2001
From: Jason <jasonanderson@uchicago.edu>
Date: Fri, 8 Feb 2019 15:44:01 -0600
Subject: [PATCH] Hide logs when looping over passwords

When ansible goes in to a loop, by default it prints all the keys for
the item it is looping over. Some roles, when setting up the databases,
iterate over an object that includes the database password.

Override the loop label to hide everything but the database name.

Change-Id: I336a81a5ecd824ace7d40e9a35942a1c853554cd
---
 ansible/roles/ironic/tasks/bootstrap.yml | 2 ++
 ansible/roles/nova/tasks/bootstrap.yml   | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/ansible/roles/ironic/tasks/bootstrap.yml b/ansible/roles/ironic/tasks/bootstrap.yml
index 0763380b4b..b98f202432 100644
--- a/ansible/roles/ironic/tasks/bootstrap.yml
+++ b/ansible/roles/ironic/tasks/bootstrap.yml
@@ -44,6 +44,8 @@
       database_user: "{{ ironic_inspector_database_user }}"
       database_password: "{{ ironic_inspector_database_password }}"
       group: "ironic-inspector"
+  loop_control:
+    label: "{{ item.database_name }}"
   when:
     - not use_preconfigured_databases | bool
     - inventory_hostname in groups[item.group]
diff --git a/ansible/roles/nova/tasks/bootstrap.yml b/ansible/roles/nova/tasks/bootstrap.yml
index 8f43f8fb5d..130b9d9ce6 100644
--- a/ansible/roles/nova/tasks/bootstrap.yml
+++ b/ansible/roles/nova/tasks/bootstrap.yml
@@ -41,6 +41,8 @@
     - database_name: "{{ nova_api_database_name }}"
       database_username: "{{ nova_api_database_user }}"
       database_password: "{{ nova_api_database_password }}"
+  loop_control:
+    label: "{{ item.database_name }}"
   run_once: True
   delegate_to: "{{ groups['nova-api'][0] }}"
   when: