fix(json-specs): add secret flags on all secret fields

cassandra_nodetool/assets/configuration/spec.yaml

@@ -50,6 +50,7 @@ files:
         Password from the credentials needed to connect to the host. These are the credentials for the JMX server.
         For the check to work, this user must have a read/write access so that the Datadog Cassandra Nodetool
         check can execute the `status` command
+      secret: true
       value:
         type: string
     - name: ssl

clickhouse/assets/configuration/spec.yaml

@@ -30,6 +30,7 @@ files:
           example: default
     - name: password
       description: The password of `username`.
+      secret: true
       value:
         type: string
     - name: db

datadog_checks_dev/changelog.d/21975.fixed

@@ -0,0 +1 @@
+Mark TLS and JMX configuration template passwords as secrets.

datadog_checks_dev/datadog_checks/dev/tooling/templates/configuration/instances/jmx.yaml

@@ -32,6 +32,7 @@
 
 - name: password
   description: Password to use when connecting to JMX.
+  secret: true
   value:
     type: string
 
@@ -83,6 +84,7 @@
   description: |
     The password for your TrustStore.jks file.
     `trust_store_password` should be set if SSL is enabled.
+  secret: true
   value:
     type: string
 
@@ -97,6 +99,7 @@
   description: |
     The password to your key store.
     `key_store_password` should be set if client authentication is enabled on the target JVM.
+  secret: true
   value:
     type: string
 

datadog_checks_dev/datadog_checks/dev/tooling/templates/configuration/instances/tls.yaml

@@ -35,6 +35,7 @@
 
     Setting this implicitly sets `tls_verify` to true.
 - name: tls_private_key_password
+  secret: true
   value:
     example: <PRIVATE_KEY_PASSWORD>
     type: string

disk/assets/configuration/spec.yaml

@@ -257,6 +257,7 @@ files:
                   type: string
                 - name: password
                   type: string
+                  secret: true
                 - name: host
                   type: string
                 - name: share

esxi/assets/configuration/spec.yaml

@@ -34,6 +34,7 @@ files:
           display_priority: 1
           description: |
             The ESXi host password
+          secret: true
           value:
             type: string
             example: <PASSWORD>

foundationdb/assets/configuration/spec.yaml

@@ -30,6 +30,7 @@ files:
         type: string
     - name: tls_password
       description: The byte-string representing the passcode for unencrypting the private key
+      secret: true
       value:
         type: string
     - name: tls_ca_file

gitlab/assets/configuration/spec.yaml

@@ -20,6 +20,7 @@ files:
       description: |
         The GitLab API token for this instance
         used to collect the GitLab version.
+      secret: true
       value:
         type: string
     - name: prometheus_endpoint

harbor/assets/configuration/spec.yaml

@@ -55,5 +55,6 @@ files:
       - name: password
         required: true
         description: The password used together with the username for authentication against the Harbor API.
+        secret: true
         value:
           type: string

ibm_db2/assets/configuration/spec.yaml

@@ -28,6 +28,7 @@ files:
       - name: password
         description: The password of `username`.
         required: True
+        secret: true
         value:
           type: string
       - name: host

ibm_i/assets/configuration/spec.yaml

@@ -27,6 +27,7 @@ files:
     - name: password
       description: |
         The user profile password used to authenticate to the system.
+      secret: true
       value:
         type: string
     - name: driver

mcache/assets/configuration/spec.yaml

@@ -33,6 +33,7 @@ files:
         type: string
     - name: password
       description: Password for the Mcache status endpoint authentication.
+      secret: true
       value:
         type: string
     - name: options

mongo/assets/configuration/spec.yaml

@@ -50,6 +50,7 @@ files:
     - name: password
       description: |
         The password to use for authentication.
+      secret: true
       value:
         type: string
     - name: connection_scheme

mysql/assets/configuration/spec.yaml

@@ -45,6 +45,7 @@ files:
             description: |
               Password associated to the MySQL user.
             enabled: true
+            secret: true
             value:
               type: string
 

openldap/assets/configuration/spec.yaml

@@ -22,6 +22,7 @@ files:
         example: <USER_DISTINGUISHED_NAME>
     - name: password
       description: Password associated with `username`
+      secret: true
       value:
         type: string
     - name: ssl_verify

openstack_controller/assets/configuration/spec.yaml

@@ -31,6 +31,7 @@ files:
         - name: password
           description: |
            The Password used to connect to Openstack.
+          secret: true
           value:
             example: <PASSWORD>
             type: string

oracle/assets/configuration/spec.yaml

@@ -48,6 +48,7 @@ files:
     - name: password
       description: The password for the Datadog user account.
       required: true
+      secret: true
       value:
         type: string
     - name: jdbc_driver_path

pgbouncer/assets/configuration/spec.yaml

@@ -32,6 +32,7 @@ files:
       - name: password
         description: |
           If `database_url` is not used, set up the password to use with the `password` parameter.
+        secret: true
         value:
           type: string
       - name: use_cached

postgres/assets/configuration/spec.yaml

@@ -34,6 +34,7 @@ files:
         display_default: "datadog"
     - name: password
       description: The password associated with the Datadog user.
+      secret: true
       value:
         type: string
     - name: dbname

powerdns_recursor/assets/configuration/spec.yaml

@@ -23,6 +23,7 @@ files:
     - name: api_key
       required: true
       description: Recursor web server api key.
+      secret: true
       value:
         type: string
     - name: version

proxysql/assets/configuration/spec.yaml

@@ -31,6 +31,7 @@ files:
       required: true
       description: |
         The ProxySQL admin password.
+      secret: true
       value:
         type: string
         example: <PROXYSQL_ADMIN_PASSWORD>

rethinkdb/assets/configuration/spec.yaml

@@ -31,6 +31,7 @@ files:
 
           - name: password
             description: The password for the user account to connect as.
+            secret: true
             value:
               type: string
 

sap_hana/assets/configuration/spec.yaml

@@ -31,6 +31,7 @@ files:
       - name: password
         description: The password of `username`.
         required: true
+        secret: true
         value:
           type: string
       - name: schema

singlestore/assets/configuration/spec.yaml

@@ -27,6 +27,7 @@ files:
     - name: password
       description: The password to use for connecting to the SingleStore database.
       required: false
+      secret: true
       value:
         type: string
     - name: connect_timeout

snowflake/assets/configuration/spec.yaml

@@ -48,6 +48,7 @@ files:
           example: <USER>
       - name: password
         description: Password for the user
+        secret: true
         value:
           type: string
           example: <PASSWORD>
@@ -113,6 +114,7 @@ files:
           display_default: snowflake
       - name: token
         description: Token used for OAuth connection to Snowflake. You cannot use this alongside `token_path`.
+        secret: true
         value:
           type: string
       - name: token_path

sonatype_nexus/assets/configuration/spec.yaml

@@ -17,6 +17,7 @@ files:
           - name: password
             required: true
             description: "The password of your Sonatype Nexus account."
+            secret: true
             value:
               type: string
               example: test_password

sqlserver/assets/configuration/spec.yaml

@@ -48,6 +48,7 @@ files:
         type: string
     - name: password
       description: Password for the Datadog-SQL server check user. It will be ignored if using Windows authentication.
+      secret: true
       value:
         type: string
     - name: server_version

ssh_check/assets/configuration/spec.yaml

@@ -28,6 +28,7 @@ files:
               Password to use for the SSH connection.
               If an encrypted SSH private key is specified in `private_key_file`,
                 the given password will be used to decrypt the key.
+            secret: true
             value:
               type: string
 

supervisord/assets/configuration/spec.yaml

@@ -41,6 +41,7 @@ files:
             example: <USERNAME>
         - name: password
           description: Required only if a password is configured.
+          secret: true
           value:
             type: string
             example: <PASSWORD>

tibco_ems/assets/configuration/spec.yaml

@@ -36,6 +36,7 @@ files:
         Password from the credentials needed to connect to the host. These are the credentials for the Tibco EMS server.
         For the check to work, this user must have access so that the Datadog Tibeco EMS
         check can execute the `show` command.
+      secret: true
       value:
         type: string
     - name: script_path

vertica/assets/configuration/spec.yaml

@@ -57,6 +57,7 @@ files:
               example: <USERNAME>
           - name: password
             description: The password of `username`.
+            secret: true
             value:
               type: string
               example: <PASSWORD>

vsphere/assets/configuration/spec.yaml

@@ -36,6 +36,7 @@ files:
         description: |
           The password of the read-only credentials to connect to vCenter.
           see https://app.datadoghq.com/account/settings#integrations/vsphere
+        secret: true
         value:
           type: string
           example: <PASSWORD>

win32_event_log/assets/configuration/spec.yaml

@@ -289,6 +289,7 @@ files:
 
         If this, `user`, and `domain` are all unselected, then the credentials
         of the current user will be used.
+      secret: true
       value:
         type: string
     - name: domain

wmi_check/assets/configuration/spec.yaml

@@ -57,6 +57,7 @@ files:
     - name: password
       required: false
       description: If authentication is needed, specify a `password` here.
+      secret: true
       value:
         type: string
     - name: namespace