Skip to content
This repository has been archived by the owner on May 20, 2023. It is now read-only.

Commit

Permalink
Set kubeconfig and asset_dist as sensitive
Browse files Browse the repository at this point in the history
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes poseidon/typhoon#884
  • Loading branch information
dghubble committed Nov 23, 2020
1 parent f8331f0 commit f2cd3a4
Showing 1 changed file with 6 additions and 3 deletions.
9 changes: 6 additions & 3 deletions outputs.tf
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
output "kubeconfig-admin" {
value = module.bootstrap.kubeconfig-admin
value = module.bootstrap.kubeconfig-admin
sensitive = true
}

# Outputs for Kubernetes Ingress
Expand Down Expand Up @@ -32,7 +33,8 @@ output "security_group_id" {
}

output "kubeconfig" {
value = module.bootstrap.kubeconfig-kubelet
value = module.bootstrap.kubeconfig-kubelet
sensitive = true
}

# Outputs for custom firewalling
Expand Down Expand Up @@ -61,6 +63,7 @@ output "backend_address_pool_id" {
# Outputs for debug

output "assets_dist" {
value = module.bootstrap.assets_dist
value = module.bootstrap.assets_dist
sensitive = true
}

0 comments on commit f2cd3a4

Please sign in to comment.