是否可以使用登录帐户的登录名/密码在剧本中重复使用？

Question

我创建了一个具有2个选项的作业，以便用户编写其登录名/密码。此凭证将稍后在剧本中用作额外变量。

但是所有这些凭证都可以在日志中读取！！！

如何解决该问题？

Answer 1

您可以在嵌入式播放簿或播放簿步骤（对于任何Rundeck步骤）中使用“掩码密码”日志过滤器，也可以查看文档here。我做了一个工作定义示例，可以工作：

<joblist>
  <job>
    <context>
      <options preserveOrder='true'>
        <option name='opt1' secure='true' value='12345' valueExposed='true' />
      </options>
    </context>
    <defaultTab>nodes</defaultTab>
    <description></description>
    <dispatch>
      <excludePrecedence>true</excludePrecedence>
      <keepgoing>false</keepgoing>
      <rankOrder>ascending</rankOrder>
      <successOnEmptyNodeFilter>false</successOnEmptyNodeFilter>
      <threadcount>1</threadcount>
    </dispatch>
    <executionEnabled>true</executionEnabled>
    <id>2c9b3903-a545-4dbd-aeac-578889dbb611</id>
    <loglevel>INFO</loglevel>
    <name>HelloWorld</name>
    <nodeFilterEditable>false</nodeFilterEditable>
    <nodefilters>
      <filter>name: 192.168.33.20</filter>
    </nodefilters>
    <nodesSelectedByDefault>true</nodesSelectedByDefault>
    <scheduleEnabled>true</scheduleEnabled>
    <sequence keepgoing='false' strategy='node-first'>
      <command>
        <node-step-plugin type='com.batix.rundeck.plugins.AnsiblePlaybookInlineWorkflowNodeStep'>
          <configuration>
            <entry key='ansible-base-dir-path' value='/home/user/' />
            <entry key='ansible-become' value='false' />
            <entry key='ansible-playbook-inline' value='---&#10;# This playbook prints a simple debug message&#10;- name: Echo &#10;  hosts: all&#10;  connection: local&#10;&#10;  tasks:&#10;  - name: Print debug message&#10;    debug:&#10;      msg: ${option.opt1}' />
            <entry key='ansible-ssh-passphrase-option' value='option.password' />
            <entry key='ansible-ssh-use-agent' value='false' />
          </configuration>
        </node-step-plugin>
        <plugins>
          <LogFilter type='LogFilter:mask-passwords'>
            <config>
              <color>red</color>
              <replacement>[SECURE]</replacement>
            </config>
          </LogFilter>
        </plugins>
      </command>
    </sequence>
    <uuid>2c9b3903-a545-4dbd-aeac-578889dbb611</uuid>
  </job>
</joblist>