search

hashicorp / nomad

Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
https://www.nomadproject.io/
Other
14.81k stars 1.94k forks source link

Feature Request: Add support for `sensitive-variables` #7109

Open powellchristoph opened 4 years ago

powellchristoph commented 4 years ago

Packer currently implements a sensitive-variables feature that would be very nice in Nomad. Specifically for the Job definition in the UI. It is nice to allow devs and management access to a read-only version of the UI using ACLs but they are not fine grained enough.

I would like to allow access but simple hide secrets that are passed into the job using env vars in 12-factor app style.

https://packer.io/docs/templates/user-variables.html

lopcode commented 3 years ago

It's worth noting that Terraform also supports "sensitive variables", as per this tutorial: https://learn.hashicorp.com/tutorials/terraform/sensitive-variables

I'd like to hide the value of the given input variable during nomad plan, by replacing it with (sensitive value) or similar.