mirror of
https://github.com/opentofu/opentofu.git
synced 2025-02-11 16:15:33 -06:00
b62f6af158
* core: Add support for marking outputs as sensitive
This commit allows an output to be marked "sensitive", in which case the
value is redacted in the post-refresh and post-apply list of outputs.
For example, the configuration:
```
variable "input" {
default = "Hello world"
}
output "notsensitive" {
value = "${var.input}"
}
output "sensitive" {
sensitive = true
value = "${var.input}"
}
```
Would result in the output:
```
terraform apply
Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
Outputs:
notsensitive = Hello world
sensitive = <sensitive>
```
The `terraform output` command continues to display the value as before.
Limitations: Note that sensitivity is not tracked internally, so if the
output is interpolated in another module into a resource, the value will
be displayed. The value is still present in the state.
|
||
|---|---|---|
| .. | ||
| module | ||
| test-fixtures | ||
| append_test.go | ||
| append.go | ||
| config_string.go | ||
| config_test.go | ||
| config_tree.go | ||
| config.go | ||
| import_tree.go | ||
| interpolate_funcs_test.go | ||
| interpolate_funcs.go | ||
| interpolate_test.go | ||
| interpolate_walk_test.go | ||
| interpolate_walk.go | ||
| interpolate.go | ||
| lang.go | ||
| loader_hcl_test.go | ||
| loader_hcl.go | ||
| loader_test.go | ||
| loader.go | ||
| merge_test.go | ||
| merge.go | ||
| raw_config_test.go | ||
| raw_config.go | ||
| string_list_test.go | ||
| string_list.go | ||