add az logout template

.pipelines/build-and-push-images.yml

@@ -18,6 +18,7 @@ jobs:
   - template: ./templates/template-push-images-to-acr.yml
     parameters:
       rpImageACR: $(RP_IMAGE_ACR)
+  - template: ./templates/template-az-cli-logout.yml
   - script: |
       cp -a --parents aro "$(Build.ArtifactStagingDirectory)"
     displayName: Copy artifacts

.pipelines/deploy-dev-env.yml

@@ -23,3 +23,4 @@ jobs:
     parameters:
       subscriptionID: $(AZURE_SUBSCRIPTION_ID)
       azureDevOpsJSONSPN: $(aro-v4-e2e-devops-spn)
+  - template: ./templates/template-az-cli-logout.yml

.pipelines/e2e.yml

@@ -31,3 +31,4 @@ jobs:
   - template: ./templates/template-run-rp-and-e2e.yml
   - template: ./templates/template-clean-e2e-db.yml
   - template: ./templates/template-clean-e2e-deps.yml
+  - template: ./templates/template-az-cli-logout.yml

.pipelines/templates/template-az-cli-login.yml

@@ -1,3 +1,5 @@
+# if you include this template, also include template-az-cli-logout.yml to
+# remove the credentials from the CI VM.
 parameters:
   azureDevOpsJSONSPN: ''
 steps:

.pipelines/templates/template-az-cli-logout.yml

@@ -0,0 +1,7 @@
+steps:
+- script: |
+    set -e
+    az logout
+    rm -rf ~/.azure
+  displayName: 🗝 AZ Logout
+  condition: always()

.pipelines/templates/template-prod-e2e-steps.yml

@@ -42,3 +42,4 @@ steps:
     clean_e2e
   condition: succeededOrFailed()
   displayName: 🧹 Clean up after ${{ parameters.location }} E2E
+- template: ./templates/template-az-cli-logout.yml