'Creating Nova databases user and setting permission' shows passwords

[Joshua Harlow]

The following is missing a no_log and is showing passwords in our CI.

2018-02-09 19:58:24.417486 | map | TASK [nova : Creating Nova databases user and setting permissions] *************
2018-02-09 19:58:24.417698 | map | task path: /home/zuul/src/github.secureserver.net/cloudplatform/openstack-deploy/.venv/share/kolla-ansible/ansible/roles/nova/tasks/bootstrap.yml:21
2018-02-09 19:58:26.190505 | map | changed: [hv -> 10.26.58.70] => (item={u'database_password': u'Z7xJcwxM', u'database_name': u'nova', u'database_username': u'nova'}) => {"changed": true, "item": {"database_name": "nova", "database_password": "Z7xJcwxM", "database_username": "nova"}, "user": "nova"}
2018-02-09 19:58:27.688425 | map | changed: [hv -> 10.26.58.70] => (item={u'database_password': u'Z7xJcwxM', u'database_name': u'nova_cell0', u'database_username': u'nova'}) => {"changed": true, "item": {"database_name": "nova_cell0", "database_password": "Z7xJcwxM", "database_username": "nova"}, "user": "nova"}
2018-02-09 19:58:29.166995 | map | ok: [hv -> 10.26.58.70] => (item={u'database_password': u'Z7xJcwxM', u'database_name': u'nova', u'database_username': u'nova'}) => {"changed": false, "item": {"database_name": "nova", "database_password": "Z7xJcwxM", "database_username": "nova"}, "user": "nova"}
2018-02-09 19:58:29.183979 | map |

[Mark Goddard (mgoddard)]

You can also use a label in loop control to change the item displayed:

loop_control:
  label: "{{ item.database_name }}"

See http://docs.ansible.com/ansible/latest/playbooks_loops.html#loop-control

[Tom Fifield (fifieldt)]

Looking at the current ansible/roles/nova/tasks/bootstrap.yml this appears to be fixed.