Skip to content
This repository has been archived by the owner on Feb 20, 2023. It is now read-only.

Commit

Permalink
Set kubeconfig and asset_dist as sensitive
Browse files Browse the repository at this point in the history
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes poseidon/typhoon#884
  • Loading branch information
dghubble committed Nov 23, 2020
1 parent 3303657 commit 519f377
Showing 1 changed file with 6 additions and 3 deletions.
9 changes: 6 additions & 3 deletions outputs.tf
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
output "kubeconfig-admin" {
value = module.bootstrap.kubeconfig-admin
value = module.bootstrap.kubeconfig-admin
sensitive = true
}

# Outputs for Kubernetes Ingress
Expand Down Expand Up @@ -32,7 +33,8 @@ output "worker_security_groups" {
}

output "kubeconfig" {
value = module.bootstrap.kubeconfig-kubelet
value = module.bootstrap.kubeconfig-kubelet
sensitive = true
}

# Outputs for custom load balancing
Expand All @@ -55,6 +57,7 @@ output "worker_target_group_https" {
# Outputs for debug

output "assets_dist" {
value = module.bootstrap.assets_dist
value = module.bootstrap.assets_dist
sensitive = true
}

0 comments on commit 519f377

Please sign in to comment.