chef_data_bag and chef_data_bag_item do not support secret key

[hashibot]

This issue was originally opened by @oridistor as hashicorp/terraform#11086. It was migrated here as part of the provider split. The original body of the issue is below.

---

Terraform Version

v0.8.2

Affected Resource(s)

chef_data_bag chef_data_bag_item

Moving from a bash code using knife to a terraform code, I've noticed that chef_data_bag does not support the --secret feature that is supported in knife. As of that, I can't encrypt my keys and I can't securely move them to the chef server. It would be nice if we had a "secret" variable for databag and databag items that would act like knife data bag --secret.

[Nowaker]

Hey @apparentlymart and @rata - is this feature planned for implementation any time soon? Wondering if we should wait a bit or simply take the bash route. Thanks!

[rata]

@Nowaker hi! Sorry, not sure why you mention me. Maybe because of: https://github.com/terraform-providers/terraform-provider-chef/pull/18/files ?

I've not using chef_data_bag encrypted on terraform. And that PR is not related at all with it. I just use terraform (not actively contributing to this repo), chef usage on terraform is really small on my work, but as far as I understand there is no such option for secret with chef_data_bag (looking at: https://www.terraform.io/docs/providers/chef/r/data_bag.html)

[Lasering]

This would be really helpful for my workflow.

[bflad]

Hi everyone! 👋 The Terraform team at HashiCorp won't be able to work on this in the near future due to our focus being elsewhere, but we'd be happy to review a pull request if you or someone else has the time and motivation to implement it. Alternatively, if others would also like to see this implemented I'd encourage adding a :+1: upvote reaction to the original issue comment (not to this comment), which we use as one of the inputs to prioritize work for the Terraform team.

[bhoriuchi]

I'm working on this https://github.com/bhoriuchi/terraform-provider-chef

[vishmit123]

@bhoriuchi have you got this merged?