From d03523078e73360e9cf8d39ac0825d7f98d64924 Mon Sep 17 00:00:00 2001
From: Rich Megginson Contents
id="toc-postgresql_input_file">postgresql_input_file
@@ -294,6 +296,19 @@
postgresql_server_tuning
independent of the actual deployment.
See the examples/ for
details.
If true, suppress potentially sensitive output from
+tasks that handle credentials, secrets, and other sensitive data by
+setting no_log: true on those tasks. This prevents
+passwords, API tokens, private keys, and similar sensitive information
+from appearing in Ansible logs and console output.
If you need to debug issues with credential handling or secret
+management, you can temporarily set
+postgresql_secure_logging: false to see the full output
+from these tasks. However, be aware that this may expose sensitive
+information in logs, so it should only be used in development or
+troubleshooting scenarios.
Default: true
This section should cover role behavior for repeated runs.