Set kubeconfig and asset_dist as sensitive

* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes https://github.com/poseidon/typhoon/issues/884

CHANGES.md

@@ -6,6 +6,7 @@ Notable changes between versions.
 
 * Add input variable validations ([#880](https://github.com/poseidon/typhoon/pull/880))
   * Require Terraform v0.13+ ([migration guide](https://typhoon.psdn.io/topics/maintenance/#terraform-versions))
+* Set output sensitive to suppress console display for some cases ([#885](https://github.com/poseidon/typhoon/pull/885))
 
 ### AWS
 

aws/fedora-coreos/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "worker_security_groups" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom load balancing
@@ -56,5 +58,6 @@ output "worker_target_group_https" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

aws/flatcar-linux/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "worker_security_groups" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom load balancing
@@ -56,5 +58,6 @@ output "worker_target_group_https" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

azure/fedora-coreos/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "security_group_id" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalling
@@ -62,5 +64,6 @@ output "backend_address_pool_id" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

azure/flatcar-linux/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "security_group_id" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalling
@@ -62,5 +64,6 @@ output "backend_address_pool_id" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

bare-metal/fedora-coreos/kubernetes/outputs.tf

@@ -1,10 +1,12 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for debug
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

bare-metal/flatcar-linux/kubernetes/outputs.tf

@@ -1,10 +1,12 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for debug
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

digital-ocean/fedora-coreos/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "workers_ipv6" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalls
@@ -58,5 +60,6 @@ output "vpc_id" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

digital-ocean/flatcar-linux/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -33,6 +34,7 @@ output "workers_ipv6" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalls
@@ -58,5 +60,6 @@ output "vpc_id" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

google-cloud/fedora-coreos/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -22,6 +23,7 @@ output "network_name" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalling
@@ -46,5 +48,6 @@ output "worker_target_pool" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }
 

google-cloud/flatcar-linux/kubernetes/outputs.tf

@@ -1,5 +1,6 @@
 output "kubeconfig-admin" {
   value     = module.bootstrap.kubeconfig-admin
+  sensitive = true
 }
 
 # Outputs for Kubernetes Ingress
@@ -22,6 +23,7 @@ output "network_name" {
 
 output "kubeconfig" {
   value     = module.bootstrap.kubeconfig-kubelet
+  sensitive = true
 }
 
 # Outputs for custom firewalling
@@ -46,5 +48,6 @@ output "worker_target_pool" {
 
 output "assets_dist" {
   value     = module.bootstrap.assets_dist
+  sensitive = true
 }