jprdonnelly/opentf
1
0
Fork 0
mirror of https://github.com/opentffoundation/opentf.git synced 2025-12-25 01:00:16 -05:00
Code Issues Packages Projects Releases Wiki Activity

allow remote service creds to be configured using env

Browse Source 
Introduces a new method of configuring token service credentials using a host-specific environment variable. This configuration was previously possible using the [terraform-credentials-env](https://github.com/apparentlymart/terraform-credentials-env) credentials helper.

This new method is now consulted first, as it is seen to be the most proximate source of credentials before CLI configuration while still falling back to the credentials helper.
This commit is contained in:
Brandon Croft
2022-04-04 17:43:34 -06:00
parent 714740454e
commit 307326fa3a
4 changed files with 95 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
website/docs/cli/config/config-file.mdx
View File

@@ -115,12 +115,22 @@ is available at multiple hostnames, use only one of them consistently.
Terraform Cloud responds to API calls at both its current hostname
`app.terraform.io`, and its historical hostname `atlas.hashicorp.com`.
### Credentials Helpers
### Environment Variable Credentials
If you would prefer not to store your API tokens directly in the CLI
configuration as described in the previous section, you can optionally instruct
Terraform to use a different credentials storage mechanism by configuring a
special kind of plugin program called a _credentials helper_.
configuration, you may use a host-specific environment variable. For example,
the value of a variable named `TF_TOKEN_app_terraform_io` will be used as an
Authorization: Bearer token whenever making service requests to the hostname
"app.terraform.io".
Internationalized domain names should be converted to their [punycode equivalent](https://www.charset.org/punycode)
with an ACE prefix when used as a variable name. For example, token credentials
for 例えば.com should be set in a variable called `TF_TOKEN_xn--r8j3dr99h_com`.
### Credentials Helpers
Finally, you may instruct Terraform to use a different credentials storage mechanism
by configuring a special kind of plugin program called a _credentials helper_.
```hcl
credentials_helper "example" {