Ansible Collection - dseeley.redact_sensitive

An Ansible collection providing a callback plugin to redact sensitive data in Ansible output.

Installation

ansible-galaxy collection install dseeley.redact_sensitive

Mandatory ansible.cfg

[defaults]
stdout_callback = dseeley.redact_sensitive.redact_sensitive

Optional ansible.cfg

[callback_redact_sensitive]
enable_value_patterns = false
redaction_string = [HIDDEN]
max_redact_depth = 50
extra_key_patterns = mysecret|authcode|sessionid
extra_value_patterns = my-custom-token-[A-Z0-9]{32}|^secret-[a-f0-9]{40}$|(?:[A-Za-z0-9+/]{64,}\\n?){3,}

or ENV:

ANSIBLE_REDACT_ENABLE_VALUE_PATTERNS=false
ANSIBLE_REDACT_STRING=[HIDDEN]
ANSIBLE_REDACT_MAX_DEPTH=50
ANSIBLE_REDACT_EXTRA_KEY_PATTERNS=mysecret|authcode|sessionid
ANSIBLE_REDACT_EXTRA_VALUE_PATTERNS=my-custom-token-[A-Z0-9]{32}|^secret-[a-f0-9]{40}$|(?:[A-Za-z0-9+/]{64,}\\n?){3,}