template_file stores sensitive information in cleartext

[arohner]

When using a template_file, the contents of the variables are stored in .tfstate. This is a problem when the template contains sensitive information, such as passwords and API keys, because terraform encourages checking in the .tfstate to source control, and source control is not a good place to store credentials.

[stack72]

Related #516

[little-arhat]

related #1421

[phinze]

Thanks for the report, @arohner - closing this to keep things consolidated in #516 since this is a problem for any sensitive state values.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.