cloudposse-archives / tfmask

Terraform utility to mask select output from `terraform plan` and `terraform apply`
https://cloudposse.com/accelerate
Apache License 2.0
202 stars 27 forks source link

Mask ID of resources also #2

Closed antonbabenko closed 5 years ago

antonbabenko commented 5 years ago

Eg, random_string will print the generated string in output as ID of the resource.

resource "random_string" "password" {
  length = 16
  special = true
  override_special = "/@\" "
}
osterman commented 5 years ago

@antonbabenko Thanks!

I ran into this just now too. Will have this fixed today.

-/+ random_string.postgres_admin_password (tainted) (new resource required)
      id:              "none" => <computed> (forces new resource)
      length:          "16" => "16"
      lower:           "true" => "true"
      min_lower:       "0" => "0"
      min_numeric:     "0" => "0"
      min_special:     "0" => "0"
      min_upper:       "0" => "0"
      number:          "true" => "true"
      result:          "_Vtxn1w!-@-tZRK:" => <computed>
      special:         "true" => "true"
      upper:           "true" => "true"
osterman commented 5 years ago

@antonbabenko I don't see the secret in the ID. Can you share an example?

antonbabenko commented 5 years ago

Thanks, @osterman !