zuul: Use no_log when setting up authentication

Otherwise the secret gets picked up by ARA.

Change-Id: I980b856d1bfc2eaf77c3fcaba662c2222f8f3360

.zuul.d/secrets.yaml

@@ -52,13 +52,13 @@
       username: opendev
       email: opendev@recordsansible.org
       password: !encrypted/pkcs1-oaep
-        - AbU5h7Hn4IxTxT9gWhrY6+eEToyKaCkgUGppv14L4R7xjRbecrRwVTl7ztrLdiNXvkIIA
-          NWreTfIFPFm5lOLs4pXkwqH02yNyfuqoLoChh5vPvS2aZP2pAkTS9DUYjOpKAa0u80I2F
-          UdKys2Qv3YfoypwMJkhREhHyw/rYy43qaXt7rB64TPaRphb1ZfY0ugWR7ZQJWIaOX8Pdk
-          6QhJH4hWK8iMb5Dl7gE3D7z+1qlDPiQUY0b9Hk0L0INoXHp2QiJZS9SrbocDlojsziiCu
-          oa9OQmyKvPNw8nA+dKH+KhyDaiFyi6Ni/9ajvCNqdRJDjd/4nUWRzhjO1tua0PNHitvqx
-          tNid/Kz/dKneAwj3/U3YathdGAaei7ivro6OPWTeSlew15r6YxEOlm7sle9c/PK94JjMj
-          iGvjDACDcY6+zylimbkV4xavYbDmZiJ88/OvHRoY92KYfDGmRZ+r5tgwCS3CxvYhQlz6p
-          WOs3ptuP6HNSv6NN/jUwv8gmX1Kpui8r1945I0Bq87zkezFa8A3vCjhh+pqZhBgM8O9aM
-          4jeVtOXd+ch0mo2PMui6lwGqP9RRNGASYNQBlszZGI+ts+3oBITxFzGHnh+cOpTQ6VSUg
-          5u7qOclQtRW9ti3em7gdBLNggIZa3ZyY+iTl9jCA0oQLQZhM3cSuih/GMvtHPQ=
+        - i2OYMFMC01TCy9ZQo9cWiJXrdwXTXEPSL9PpB2+SSZ3Hs3ud4YV/gLsQNrXplDCarXx13
+          n4pq1gxK6G0xem1EJY55kQM2oXBHvrdbeL6Elmre0FnmEjSrLMn3z7oksuSAMFWSyaK4C
+          +XS0bRqsNOUti47BOlPwzlsqxJDz2bALsUXl/j4ZX8sh6X/arjZV+Ye0p8CMbbi+IcfNG
+          9WbCSW5UyFOcMa/UCQmvel3FDAtUpCc/4NApPkUPJlCC+vk2oFKI9Kxj4RyWK74KHdE63
+          yyrRTHU+01I71YX42bOCpFQtwgH+YMOAhZ1RtJ1uizwOel8PcgY5pfBQToX+0CNK6IxIH
+          wdqoghfgtYjV9DWc/jYJHgJpAhWH0UOZ+wpbyQnIHs+7w/yoECCSmvoxkYlvdnyCb3XcI
+          7fBwq9PRyRiTKW0RW4KYa57bpjUrKYPaByJ5wplELgh0rCIFiHca47HvDZezfLcOTVDV1
+          OYDOK8xhxqwcJPSHVD1nBm5172tlut+TEuYUaUMnkQA0ajK37oAhY81JIHZcit6IVeAj7
+          KhRM5o2h0k4URdX3Cxi8Rb4nH4VL5uCU4fLrjgCdbuuD/fgVjVHvp9tkbvSBGWOa1Mj4J
+          kx8QNfyoOAev+hd8cfGYrkXDnhaR5vqOJXGnk2z9dgIna/MrHKpEup4vPM/opE=

tests/basic.yaml

@@ -132,6 +132,7 @@
           ARA_API_PASSWORD: "{{ ara_api_credentials.password | default(None) }}"
           PATH: "{{ ara_api_venv_path }}/bin:/bin:/usr/bin:/usr/local/bin"
       when: ara_api_credentials is defined
+      no_log: yes
 
     # These aren't in the same task (i.e, with loop) so we can tell individual test
     # runs apart easily rather than keeping all the output bundled in a single task.