Hide sensitive output from slurm-infra playbook

Author: m-bull

.github/workflows/build-image-deploy.yml

@@ -30,17 +30,17 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: true
-            
+
       - name: Install ansible etc
         run: dev/setup-env.sh
-      
+
       - name: Write clouds.yaml
         run: |
           echo "${CLOUDS_YAML}" > ${OS_CLIENT_CONFIG_FILE}
         shell: bash
         env:
           CLOUDS_YAML: ${{ secrets.CLOUDS_YAML }}
-                  
+
       - name: Build OHPC image
         id: build
         run: |
@@ -54,7 +54,7 @@ jobs:
           echo "CLUSTER_IMAGE=$(cat cluster_image_uuid.txt)" >> $GITHUB_OUTPUT
         env:
           PACKER_LOG_PATH: ${{ github.workspace }}/packer-build.log
-      
+
       - name: Remove image build infra
         run: |
           source venv/bin/activate
@@ -65,7 +65,7 @@ jobs:
           -e image_build_cluster_id="image-build-${GITHUB_SHA::7}" \
           image-build.yml
         if: always()
-      
+
       - name: Deploy a cluster based on the new OPHC image
         id: deploy
         run: |
@@ -76,8 +76,10 @@ jobs:
           -e cluster_image=${{ steps.build.outputs.CLUSTER_IMAGE }} \
           -e cluster_name="caas-ci-${GITHUB_SHA::7}" \
           slurm-infra.yml
+        env:
+          SLURM_INFRA_HIDE_DEBUG_OUTPUT: True
         if: success()
-          
+
       - name: Remove cluster based on the new OHPC image
         run: |
           source venv/bin/activate
@@ -88,10 +90,10 @@ jobs:
           -e cluster_state=absent \
           -e cluster_name="caas-ci-${GITHUB_SHA::7}" \
           slurm-infra.yml
-        if: | 
+        if: |
           ( success() || failure() || cancelled() ) && 
           steps.build.outcome == 'success'
-     
+
       - name: Delete built image after testing
         run: |
           source venv/bin/activate
@@ -100,11 +102,11 @@ jobs:
           -e cluster_image=${{ steps.build.outputs.CLUSTER_IMAGE }} \
           -e '{"cluster_image_delete": true}' \
           image-build/image-delete-or-promote.yml
-        if: | 
+        if: |
           ( success() || failure() || cancelled() ) && 
           steps.build.outcome == 'success' && 
           github.event_name == 'pull_request'
-      
+
       - name: Promote built image from Private to Community after testing
         run: |
           source venv/bin/activate
@@ -119,7 +121,7 @@ jobs:
           steps.deploy.outcome == 'success' &&
           (( github.event_name == 'workflow_dispatch' && inputs.promote_community == true ) 
           || github.event_name == 'push' )
-        
+
       - name: Upload packer build log artifact
         uses: actions/upload-artifact@v3
         with:

slurm-infra.yml

@@ -123,8 +123,12 @@
 
 # Write the outputs as the final task
 - hosts: localhost
+  vars:
+    hide_debug_outputs: "{{ lookup('ansible.builtin.env', 'SLURM_INFRA_HIDE_DEBUG_OUTPUT', default=false) | bool }}"
   tasks:
     - debug: var=outputs
+      when:
+        - not hide_debug_outputs
       vars:
         # Ansible has a fit when there are two 'hostvars' evaluations in a resolution chain,
         # so we have to repeat logic here unfortunately