feat: Parametrize no_log usage in network role

- Replace literal no_log: true with network_secure_logging variable
- Add no_log: "{{ ansible_verbosity < 2 }}" to package_facts and service_facts
- Add network_secure_logging: true to defaults/main.yml
- Document network_secure_logging variable in README.md

This change allows users to control logging of potentially sensitive
information by setting network_secure_logging: false for debugging,
while maintaining secure defaults.

For package_facts and service_facts, the role now uses verbosity-based
logging to hide verbose output unless ansible_verbosity >= 2.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: spetrosi

README.md

@@ -115,6 +115,10 @@ the name prefix. List of variables:
 - `network_state` - The network state settings can be configured in the managed
   host, and the format and the syntax of the configuration should be consistent
   with the [nmstate state examples](https://nmstate.io/examples.html) (YAML).
+- `network_secure_logging` - If true, suppress potentially sensitive output from
+  tasks that handle credentials, secrets, and other sensitive data. Set to false
+  for debugging issues with credential handling or secret management, but be aware
+  this may expose sensitive information in logs. Defaults to `true`.
 
 ## Examples of Variables
 

defaults/main.yml

@@ -162,3 +162,4 @@ __network_required_facts:
 # the 'gather_subset' parameter of the 'setup' module
 __network_required_facts_subsets: "{{ ['!all', '!min'] +
   __network_required_facts }}"
+network_secure_logging: true

tasks/main.yml

@@ -157,7 +157,7 @@
     enabled: true
   when:
     - network_provider == "nm" or network_state != {}
-  no_log: true
+  no_log: "{{ network_secure_logging }}"
 
 # If any 802.1x connections are used, the wpa_supplicant
 # service is required to be running
@@ -176,7 +176,7 @@
     enabled: true
   when:
     - network_provider == "initscripts"
-  no_log: true
+  no_log: "{{ network_secure_logging }}"
 
 - name: Ensure initscripts network file dependency is present
   copy:

tasks/set_facts.yml

@@ -5,7 +5,7 @@
     gather_subset: "{{ __network_required_facts_subsets }}"
   when: __network_required_facts |
     difference(ansible_facts.keys() | list) | length > 0
-  no_log: true
+  no_log: "{{ network_secure_logging }}"
 
 - name: Record role begin fingerprint
   sr_fingerprint:
@@ -27,9 +27,9 @@
 
 - name: Check which services are running
   service_facts:
-  no_log: true
+  no_log: "{{ ansible_verbosity < 2 }}"
 
 # needed for ansible_facts.packages
 - name: Check which packages are installed
   package_facts:
-  no_log: true
+  no_log: "{{ ansible_verbosity < 2 }}"