Merge pull request #7126 from openedx/nadeem/protect-datadog-secure-keys

chore: Safeguard secure keys to prevent them from being displayed in Ansible output within the Datadog role
openedx-unsupported · Feb 27, 2024 · 1ba584e · 1ba584e
2 parents 70eb142 + 9863fdd
commit 1ba584e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/playbooks/roles/datadog/defaults/main.yml b/playbooks/roles/datadog/defaults/main.yml
@@ -21,4 +21,4 @@ datadog_debian_pkgs:
   - curl 
   - gnupg
 
-DATADOG_MONGODB_MONITORING: true
+DATADOG_MONGODB_MONITORING: false
diff --git a/playbooks/roles/datadog/tasks/main.yml b/playbooks/roles/datadog/tasks/main.yml
@@ -55,6 +55,7 @@
     dest: "/etc/datadog-agent/datadog.yaml"
     regexp: "^api_key:.*"
     line: "api_key: {{ DATADOG_API_KEY }}"
+  no_log: true
   notify:
     - restart the datadog service
   tags:
@@ -77,6 +78,7 @@
     owner: "{{ datadog_user }}"
     group: "{{ datadog_user }}"
     mode: 0644
+  no_log: true
   notify:
     - restart the datadog service
   tags:
-Original file line number
+Diff line change
@@ Expand Up / @@ -21,4 +21,4 @@ datadog_debian_pkgs: @@
       - curl
       - gnupg
-    DATADOG_MONGODB_MONITORING: true
+    DATADOG_MONGODB_MONITORING: false