From 09663ab12a63e0183925632bb562edfd5daccdd0 Mon Sep 17 00:00:00 2001
From: Jonathan Rosser <jonathan.rosser@rd.bbc.co.uk>
Date: Wed, 29 May 2024 16:44:57 +0100
Subject: [PATCH] Do not mark all directories as safe for git clone by default

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/920758
Change-Id: I1c2e1d10efe0e9f7a8f4c5f0d914825767a2f655
---
 defaults/main.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index c48ceefd..8632a627 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -213,5 +213,9 @@ openstack_hosts_systemd_networkd_prefix: openstack-net
 openstack_hosts_systemd_services: []
 openstack_hosts_systemd_slice: "openstack-hosts"
 
-openstack_hosts_git_safe_directories:
-  - "*"
+# define this variable to specify directories that are 'safe' for git clone
+# during pip install, typically only required for CI jobs or when the
+# openstack service repos are pre-staged/bind-mounted into LXC containers
+# and referenced using the file:// method.
+# openstack_hosts_git_safe_directories:
+#   - "*"