Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add support for write-only password #589

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

jvanbrunschot
Copy link

@jvanbrunschot jvanbrunschot commented Mar 5, 2025

Description

Add support for write_only passwords. There seems to be a bug in terraform 1.11.0:

╷
│ Error: failed to encode module.db_write_only.module.db_instance.aws_db_instance.this[0] in state: .password_wo: cannot serialize value marked as cty.NewValueMarks(marks.Ephemeral, marks.Sensitive) for inclusion in a state snapshot (this is a bug in Terraform)
│ 
│ 
│ Error: Changes.Encode: new value .password_wo: can't serialize value marked with cty.NewValueMarks(marks.Ephemeral, marks.Sensitive) (this is a bug in Terraform)

should be solved in 1.11.1 hashicorp/terraform#36619

Motivation and Context

Write Only password benefit from the fact that secrets are not stored in state anymore.

Breaking Changes

Requires Terraform version >= 1.11

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant