Trying to set the encrypted-password key does not work when using vyos_config, because of a filter on the commands to run on the target here.
I would like to be able to set the encrypted-password to be the same on all of my devices, without having to deal cleartext passwords in my ansible output diff.
Description
Description
Details
Details
- Version
- 2.3.0
- Is it a breaking change?
- Unspecified (possibly destroys the router)
- Issue type
- Bug (incorrect behavior)
Event Timeline
Comment Actions
The recent updates to vyos_user should support updating encrypted passwords, including appropriately understanding if there was a change.
Comment Actions
Module updates (6.0.0) add support for encrypted passwords, including idempotence and tests.
Comment Actions
I believe the intent of the existing filters is to prevent accidental password changes. For an automation solution, I don't see significant value in changing this behavior, except to remove the plaintext variant as well. The intention here is to prevent accidental overwrite of passwords during the configuration step. The existing vyos_user should be used for handling password changes.
Comment Actions
If a change is made to remove this, I think it should be safely placed behind an explicit configuration parameter for the vyos_config