When doing a git clone https://user:pass@gitlab.domain.tld plain text credentials appear in the Ansible output (regardless of whether the credentials are stored in plaintext or loaded from a vault). Here’s how to suppress that:
no_log: True
Before
TASK [application-texts : Clone documents repo] ****************************************************************************************************************************************************************************************************************************
changed: [srv-dev-app1b -> localhost] => (item={u'dest': u'files/app-frontend', u'repo': u'https://secretusername:secretpassword@gitlab.domain.tld/DevTeam/app-frontend.git', u'branch': u'develop'})
After
TASK [application-texts : Clone documents repo] ****************************************************************************************************************************************************************************************************************************
changed: [srv-dev-app1b -> localhost] => (item=None)
changed: [srv-dev-app1b]
PREVIOUSCheat Sheet - jq