Make outputs sensitive when they contain a secret

DFE-Digital · Jan 14, 2025 · 3dcd124 · 3dcd124
1 parent ae970d0
commit 3dcd124
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/aks/cluster_data/outputs.tf b/aks/cluster_data/outputs.tf
@@ -20,6 +20,7 @@ output "kubernetes_client_key" {
   value = (local.azure_RBAC_enabled ? null :
     base64decode(data.azurerm_kubernetes_cluster.main.kube_config.0.client_key)
   )
+  sensitive = true
 }
 
 output "kubernetes_cluster_ca_certificate" {

diff --git a/aks/secrets/outputs.tf b/aks/secrets/outputs.tf
@@ -1,3 +1,4 @@
 output "map" {
-  value = { for key, secret in data.azurerm_key_vault_secret.main : key => secret.value }
+  value     = { for key, secret in data.azurerm_key_vault_secret.main : key => secret.value }
+  sensitive = true
 }