[Infrastructure][Ansible]: Determine method for hidden information #62

New Issue

label · 2024-03-22T23:20:52Z

label commented

2024-03-22 23:20:52 +00:00

There is some data that should obviously be vaulted and hidden: Passwords. In our ansible repositories, references to these values are not committed or pushed in any way. However, there is some information that may not be as sensitive and is generally not committed either. These are things such as:

Subnets/IP's used
Hostnames
Names of EFS volumes (fs-XXXXXX)

There is likely more not listed here. Some of this information being hidden may not really gain anything and instead tends to make some work more difficult when it doesn't have to be. Fedora Project, for example, has almost all this information out in the open.

There is some data that should obviously be vaulted and hidden: Passwords. In our ansible repositories, references to these values are not committed or pushed in any way. However, there is some information that may not be as sensitive and is generally not committed either. These are things such as: * Subnets/IP's used * Hostnames * Names of EFS volumes (fs-XXXXXX) There is likely more not listed here. Some of this information being hidden may not really gain anything and instead tends to make some work more difficult when it doesn't have to be. Fedora Project, for example, has almost all this information [out in the open](https://pagure.io/fedora-infra/ansible/blob/main/f/inventory).

label added the

labels 2024-03-22 23:20:52 +00:00

label added the

priority

medium

label 2024-03-22 23:32:48 +00:00