module_args shows passwords

[toonvdn]

Hello,

When invoking a playbook, Ansible seems to write the passwords to the module_args of the invocation dictionary.

Because we'd like to expose the Tower API to benefit from the playbooks, it sure can't show sensitive data.

Is there a way to not log any module_args, at all? Or at least mask the passwords?
Not sure whether it needs to be changed in the module, though.

"invocation": { "module_args": { "username": "admin@local", "adminProxyProtocol": "https", "adminProxyHostname": null, "log": "CRITICAL", "adminProxyPort": 443, "appliance": "test", "adminProxyApplianceShortName": false, "isampwd": "XXX", "lmi_port": 443, "isamdomain": "Default", "omitAdminProxy": false, "password": "XXX", "isamuser": "sec_master" }

Setting no_log: True in the playbook/task doesn't give the expected result, because you see nothing at all.

Kind regards

[ram-ibm]

This is a good point - sorry I am late responding. Will try and see if we can research options for this.