From 5e1828ce6e3f7120b61113bc57e6a2e74dec90bf Mon Sep 17 00:00:00 2001
From: Jimmy McCrory <jimmy.mccrory@gmail.com>
Date: Wed, 5 Apr 2017 07:19:26 -0700
Subject: [PATCH] Don't log password arguments of keystone module

Set no_log=True for the 'login_password' and 'password' arguments of the
keystone module so that they will not be printed in plain text within
Ansible run output.

Change-Id: I07748e9ff1c1459f0eacf1409bef4e158c9e6446
---
 library/keystone | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/library/keystone b/library/keystone
index 2b11f8c..934b595 100644
--- a/library/keystone
+++ b/library/keystone
@@ -1302,7 +1302,8 @@ def main():
                 required=False
             ),
             login_password=dict(
-                required=False
+                required=False,
+                no_log=True
             ),
             login_tenant_name=dict(
                 required=False
@@ -1317,7 +1318,8 @@ def main():
                 required=False
             ),
             password=dict(
-                required=False
+                required=False,
+                no_log=True
             ),
             endpoint=dict(
                 required=True,