fivetran / terraform-provider-fivetran

Terraform Provider for Fivetran
https://fivetran.com
Apache License 2.0
40 stars 24 forks source link

Add the option to store and use secrets in fivetran terraform via external secret manager #343

Open JordyHeusdensDT opened 3 months ago

JordyHeusdensDT commented 3 months ago

Is your feature request related to a problem? Please describe. There is currently no way to properly use and store a secret securly while using the fivetran terraform provider. You have the next options currently as far as I know:

Describe the solution you'd like It would be interesting that Fivetran creates a new resource. This resource would be based (as inspiration) on GCP Secret Manager and AWS Secret Manager. E.g.

resource "fivetran_secret" "secret" {
  id = "fivetran_secret"
}

resource "fivetran_connector" "connector" {
  group_id = XXX
  service    = "oracle_hva"
  ....

  config {
     user = "test_user"
     ....
     password = fivetran_secret.secret.id
  }
}

The resource fivetran_secret would then make it possible to store a secret in Fivetran SAAS. The user can then manually fill in the secret via the fivetran UI, which makes sure it is securly stored (like now with the connector via the UI). Only e.g. admins would then have access to the secret. fivetran_connector would then store the fivetran_secret.secret.id in state and would fetch at run time the secret so that it is still stored securly.

Describe the use-cases if possible Savely store secrets by using the fivetran provider.