Do not log az login command on any azure role/config (#5710)

Co-authored-by: rut31337 <[email protected]>
redhat-cop · Dec 15, 2022 · d3c642f · d3c642f
1 parent 24f4d53
commit d3c642f
Show file tree

Hide file tree

Showing 13 changed files with 13 additions and 0 deletions.
diff --git a/ansible/configs/aro/destroy_env.yml b/ansible/configs/aro/destroy_env.yml
@@ -24,6 +24,7 @@
       when: az_result is failed
 
     - name: Login to Azure
+      no_log: True
       command: >-
         az login --service-principal
         -u {{ azure_service_principal | quote }}

diff --git a/ansible/roles-infra/infra-azure-create-inventory/tasks/main.yml b/ansible/roles-infra/infra-azure-create-inventory/tasks/main.yml
@@ -13,6 +13,7 @@
     - validate_azure_template
     - create_inventory
     - must
+  no_log: True
   command: >-
     az login --service-principal
     -u {{ azure_service_principal | quote }}

diff --git a/ansible/roles-infra/infra-azure-create-service-principal/tasks/main.yml b/ansible/roles-infra/infra-azure-create-service-principal/tasks/main.yml
@@ -23,6 +23,7 @@
     register: ocp_azure_pwd
 
   - name: Login to Azure
+    no_log: True
     command: >-
       az login
       -u {{azure_ru_username | quote }}

diff --git a/ansible/roles-infra/infra-azure-delete-service-principal/tasks/main.yml b/ansible/roles-infra/infra-azure-delete-service-principal/tasks/main.yml
@@ -13,6 +13,7 @@
     AZURE_CONFIG_DIR: "{{ output_dir }}/.azure-{{project_tag}}"
   block:
   - name: Login to Azure
+    no_log: True
     command: >-
       az login
       -u {{ azure_ru_username | quote }}

diff --git a/ansible/roles-infra/infra-azure-lifecycle/tasks/initialize.yml b/ansible/roles-infra/infra-azure-lifecycle/tasks/initialize.yml
@@ -16,6 +16,7 @@
       when: az_result is failed
 
     - name: Login to Azure
+      no_log: True
       command: >-
         az login --service-principal
         -u {{ azure_service_principal | quote }}

diff --git a/ansible/roles-infra/infra-azure-ssh-key/tasks/main.yml b/ansible/roles-infra/infra-azure-ssh-key/tasks/main.yml
@@ -8,6 +8,7 @@
 # FAIL if key exists remotely but not locally
 
 - name: Login to Azure
+  no_log: True
   command: >-
     az login --service-principal
     -u {{ azure_service_principal | quote }}

diff --git a/ansible/roles/host-ocp4-provisioner/tasks/azure_prereqs.yml b/ansible/roles/host-ocp4-provisioner/tasks/azure_prereqs.yml
@@ -29,6 +29,7 @@
     name: azure-cli
 
 - name: Logging into Azure
+  no_log: True
   command: >-
     az login --service-principal
     -u {{ azure_service_principal | quote }}

diff --git a/ansible/roles/open-env-azure-add-user-to-subscription/tasks/main.yml b/ansible/roles/open-env-azure-add-user-to-subscription/tasks/main.yml
@@ -44,6 +44,7 @@
         subscription_id: "{{ assignedsubscription.subscriptions[0].subscription_id }}"
 
     - name: Log into Azure CLI
+      no_log: True
       command: >
         az login --service-principal -u {{ azure_service_principal }}
         -p {{ azure_password }} --tenant {{ azure_tenant }}

diff --git a/ansible/roles/open-env-azure-create-open-env/tasks/main.yml b/ansible/roles/open-env-azure-create-open-env/tasks/main.yml
@@ -1,5 +1,6 @@
 ---
 - name: Login with azure root user
+  no_log: True
   command: >-
     az login -u "{{ azure_user }}"
     -p="{{ azure_user_password }}" --tenant="{{ azure_tenant }}"

diff --git a/ansible/roles/open-env-azure-delete-open-env/tasks/main.yml b/ansible/roles/open-env-azure-delete-open-env/tasks/main.yml
@@ -1,5 +1,6 @@
 ---
 - name: Login with azure root user
+  no_log: True
   command: >-
     az login -u "{{ azure_user }}"
     -p="{{ azure_user_password }}" --tenant="{{ azure_tenant }}"

diff --git a/ansible/roles/open-env-azure-install-aro/tasks/main.yml b/ansible/roles/open-env-azure-install-aro/tasks/main.yml
@@ -1,5 +1,6 @@
 ---
 - name: Login with azure root user
+  no_log: True
   command: >-
     az login -u "{{ azure_user }}"
     -p="{{ azure_user_password }}" --tenant="{{ azure_tenant }}"

diff --git a/ansible/roles/open-env-azure-invite-user/tasks/main.yml b/ansible/roles/open-env-azure-invite-user/tasks/main.yml
@@ -1,5 +1,6 @@
 ---
 - name: Initialize azureProfile.json
+  no_log: True
   command: >
     az login --service-principal -u {{ azure_service_principal }}
     -p {{ azure_password }} --tenant {{ azure_tenant }}

diff --git a/ansible/roles/open-env-azure-remove-user-from-subscription/tasks/main.yml b/ansible/roles/open-env-azure-remove-user-from-subscription/tasks/main.yml
@@ -16,6 +16,7 @@
     - poolid.status == 200
   block:
     - name: Log into Azure CLI
+      no_log: True
       command: >
         az login --service-principal -u {{ azure_service_principal }}
         -p {{ azure_password }} --tenant {{ azure_tenant }}