Skip to content

Commit

Permalink
Set kubeconfig and asset_dist as sensitive
Browse files Browse the repository at this point in the history
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes poseidon#884
  • Loading branch information
dghubble committed Nov 23, 2020
1 parent d470b1a commit 3e30f3c
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 4 deletions.
6 changes: 4 additions & 2 deletions fedora-coreos/kubernetes/outputs.tf
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
output "kubeconfig-admin" {
value = module.bootstrap.kubeconfig-admin
value = module.bootstrap.kubeconfig-admin
sensitive = true
}

# Outputs for debug

output "assets_dist" {
value = module.bootstrap.assets_dist
value = module.bootstrap.assets_dist
sensitive = true
}

6 changes: 4 additions & 2 deletions flatcar-linux/kubernetes/outputs.tf
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
output "kubeconfig-admin" {
value = module.bootstrap.kubeconfig-admin
value = module.bootstrap.kubeconfig-admin
sensitive = true
}

# Outputs for debug

output "assets_dist" {
value = module.bootstrap.assets_dist
value = module.bootstrap.assets_dist
sensitive = true
}

0 comments on commit 3e30f3c

Please sign in to comment.