fix: sensitive private key data was output on the trigger

Signed-off-by: Paul Bastide <pbastide@us.ibm.com>
IBM · Dec 11, 2023 · cb6f917 · cb6f917
1 parent 074b0a5
commit cb6f917
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/modules/4_pvs_support/pvs_support.tf b/modules/4_pvs_support/pvs_support.tf
@@ -338,7 +338,7 @@ resource "null_resource" "remove_chrony_changes" {
   triggers = {
     user        = var.rhel_username
     timeout     = "${var.connection_timeout}m"
-    private_key = file(var.private_key_file)
+    private_key = sensitive(file(var.private_key_file))
     host        = var.bastion_public_ip
     agent       = var.ssh_agent
   }

diff --git a/modules/7_post/haproxy_lb/haproxy_lb.tf b/modules/7_post/haproxy_lb/haproxy_lb.tf
@@ -17,7 +17,7 @@ resource "null_resource" "remove_lbs" {
     user              = var.rhel_username
     timeout           = "${var.connection_timeout}m"
     name_prefix       = "${var.name_prefix}"
-    private_key       = file(var.private_key_file)
+    private_key       = sensitive(file(var.private_key_file))
     host              = var.bastion_public_ip
     agent             = var.ssh_agent
     ansible_post_path = local.ansible_post_path

diff --git a/modules/7_post/post.tf b/modules/7_post/post.tf
@@ -42,7 +42,7 @@ resource "null_resource" "remove_workers" {
     user              = var.rhel_username
     timeout           = "${var.connection_timeout}m"
     name_prefix       = "${var.name_prefix}"
-    private_key       = file(var.private_key_file)
+    private_key       = sensitive(file(var.private_key_file))
     host              = var.bastion_public_ip
     agent             = var.ssh_agent
     ansible_post_path = local.ansible_post_path