puppet-gitlab icon indicating copy to clipboard operation
puppet-gitlab copied to clipboard

Add option to disable output of config diff

Open teluq-pbrideau opened this issue 3 years ago • 4 comments

Pull Request (PR) description

I configure my authentication through azure_activedirectory_v2, and I don’t want my client_secret to be displayed in clear in the puppet logs.

Converting the gitlab.rb.erb to .epp so it supports the sensitive type would probably be cleaner, but I did not have success with it. So this PR add option to disable output of the diff for sensitive information

class example {
  class { 'gitlab' :
    [...]
    config_show_diff => false,
  }
}

I’ve included the option to also affect the file containing $pgbouncer_password, as it is sensitive information. Is it is already a epp template, it could support sensitive type, but as I did not convert to the sensitive type elsewhere, it seemed simpler this way.

Feel free to comment if I missed anything.

This Pull Request (PR) fixes the following issues

Fixes #363

teluq-pbrideau avatar Oct 05 '22 13:10 teluq-pbrideau

I sure can default the $config_show_diff in the init.pp to false if you want to. I was just trying to not change anything from the default values, but I agree it could be set secured by default.

teluq-pbrideau avatar Oct 06 '22 15:10 teluq-pbrideau

Would you like me to add the config_show_diff option to global_hook.pp, system_hook.pp and custom_hook.pp, and set the default value to false? It would give option to people who want to display the diff be able to do it.

teluq-pbrideau avatar Oct 06 '22 15:10 teluq-pbrideau

@smortex I’ve stumble over this today, is there anything else I could do to make the change to get merged?

teluq-pbrideau avatar Feb 10 '23 16:02 teluq-pbrideau

@teluq-pbrideau Please rebase with out master branch and it can be merged afterwards

root-expert avatar Feb 11 '23 10:02 root-expert

Closing as it seems this is not wanted

teluq-pbrideau avatar Jul 03 '24 17:07 teluq-pbrideau