How are you handling passwords

[makarek]

I'm curious how others handling their password for terraform ?
Do you put it in repo ?

[mechastorm]

You might be better off asking in the Slack channel. But if you are asking about sensitive values? For some of my workflows, I pull in our secrets from a secrets store and have Atlantis read that.

ie. in your atlantis.yaml, under workflow you could do the following with SSM Parameter Store

workflows:
  my_env:
    plan:
      steps:
        - plan:
            extra_args: [
              "-var 'assume_role_arn=my_role",
              '-var "my_secret=$(aws ssm get-parameter --name /path/to/secret--with-decryption --region aws_region --output text --query Parameter.Value)"',
            ]

[lkysow]

their password for terraform

Hi @makarek, can you tell us what password you're referring to?

[makarek]

Hi lkysow

I was referring to secret like for eg. password for VMware cluster and so on.
I was curious how other handling such stuff.

[lkysow]

This answer might be useful: #471 (comment)

If you're talking about using the VMWare provider then you could run Atlantis with the VSPHERE_USER and VSPHERE_PASSWORD environment variables set where Atlantis is running.

[lkysow]

Closing because I think I've answered the question and I haven't heard back in a week.