ansible-devops icon indicating copy to clipboard operation
ansible-devops copied to clipboard

Unsanitized inputs in jdbc.yaml

Open faangbait opened this issue 7 months ago • 0 comments

Because jdbc and similar templates print secrets as stringData, a password containing special escape codes (e.g. {{) will cause the templating engine to fail, returning An unhandled exception occurred while running the lookup plugin 'template'. Error was a <class 'ansible.errors.AnsibleError'>, original message: template error while templating string: expected token 'end of print statement', got 'string'.

Templates should use {{ out | b64encode }} in secrets.

faangbait avatar Jul 25 '24 22:07 faangbait