From 670051f14490ad7418f967298dd0be138842501e Mon Sep 17 00:00:00 2001 From: alexanderbazhenoff Date: Mon, 25 Mar 2024 01:03:30 +0300 Subject: [PATCH] checkov fixes --- roles/postgresql/defaults/main.yml | 6 ++++-- .../examples/install_postgresql16_with_pgadmin.yml | 1 + roles/postgresql/molecule/default/side_effect.yml | 3 ++- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/roles/postgresql/defaults/main.yml b/roles/postgresql/defaults/main.yml index 72dd2c9..7704033 100644 --- a/roles/postgresql/defaults/main.yml +++ b/roles/postgresql/defaults/main.yml @@ -72,7 +72,8 @@ hba_conf_content: | # https://docs.ansible.com/ansible/latest/collections/community/postgresql/postgresql_user_module.html postgresql_users: - name: username - password: my_password # checkov:skip=CKV_SECRET_6 because of example defaults + password: my_password +# checkov:skip=CKV_SECRET_6 because of example defaults # List of postgresql databases parameters to perform role action (create, drop, dump, rename, restore). # https://docs.ansible.com/ansible/latest/collections/community/postgresql/postgresql_db_module.html @@ -105,4 +106,5 @@ postgresql_slots: # pgadmin email and password for administrator login via web UI pgadmin_email: my.name@company.com -pgadmin_password: my_password # checkov:skip=CKV_SECRET_6 because of example defaults +pgadmin_password: my_password +# checkov:skip=CKV_SECRET_6 because of example defaults diff --git a/roles/postgresql/examples/install_postgresql16_with_pgadmin.yml b/roles/postgresql/examples/install_postgresql16_with_pgadmin.yml index 4309316..7b018d9 100644 --- a/roles/postgresql/examples/install_postgresql16_with_pgadmin.yml +++ b/roles/postgresql/examples/install_postgresql16_with_pgadmin.yml @@ -16,6 +16,7 @@ pgadmin_email: admin@domain.com # kics-scan ignore-line pgadmin_password: my_pgadmin_password + # checkov:skip=CKV_SECRET_6 because of example postgresql_conf: port: 5432 max_connections: 1000 diff --git a/roles/postgresql/molecule/default/side_effect.yml b/roles/postgresql/molecule/default/side_effect.yml index 475651d..739ab01 100644 --- a/roles/postgresql/molecule/default/side_effect.yml +++ b/roles/postgresql/molecule/default/side_effect.yml @@ -16,7 +16,8 @@ postgresql_users: - name: test # kics-scan ignore-line - password: my_password # checkov:skip=CKV_SECRET_6 for test only + password: my_password + # checkov:skip=CKV_SECRET_6 for test only - name: "default >>> side effect | Include postgresql role to create database" ansible.builtin.include_role: