Hide the AdminToken too.

This is arguably more important than passwords as it allow rooting
keystone :).

Change-Id: I12d8ae0f096480112a82d7598eedae64a6fbd861

diff --git a/overcloud-source.yaml b/overcloud-source.yaml
index c464235..1f0442e 100644 (file)
--- a/overcloud-source.yaml
+++ b/overcloud-source.yaml
@@ -11,6 +11,7 @@ Parameters:
     Default: unset
     Description: The keystone auth secret.
     Type: String
+    NoEcho: true
   CinderPassword:
     Default: unset
     Description: The password for the cinder service account, used by cinder-api.

diff --git a/undercloud-bm.yaml b/undercloud-bm.yaml
index df9a443..181a58e 100644 (file)
--- a/undercloud-bm.yaml
+++ b/undercloud-bm.yaml
@@ -10,6 +10,7 @@ Parameters:
     Default: unset
     Description: The keystone auth secret.
     Type: String
+    NoEcho: true
   BaremetalArch:
     Default: i386
     Description: The architecture to use in Nova-BM - i386 or amd64.

diff --git a/undercloud-vm.yaml b/undercloud-vm.yaml
index 95a22f8..d3394c2 100644 (file)
--- a/undercloud-vm.yaml
+++ b/undercloud-vm.yaml
@@ -10,6 +10,7 @@ Parameters:
     Default: unset
     Description: The keystone auth secret.
     Type: String
+    NoEcho: true
   BaremetalArch:
     Default: i386
     Description: The architecture to use in Nova-BM - i386 or amd64.