mirror of
https://github.com/opentffoundation/opentf.git
synced 2026-02-02 18:00:18 -05:00
e27aacebf9
Similar to `after_unknown`, `before_sensitive` and `after_sensitive` are values with similar structure to `before` and `after` which encode the presence of sensitive values in a planned change. These should be used to obscure sensitive values from human-readable output. These values follow the same structure as the `before` and `after` values, replacing sensitive values with `true`, and non-sensitive values with `false`. Following the `after_unknown` precedent, we omit non-sensitive `false` values for object attributes/map values, to make serialization more compact. One difference from `after_unknown` is that a sensitive complex value (collection or structural type) is replaced with `true`. If the complex value itself is sensitive, all of its contents should be obscured.
162 lines
4.7 KiB
JSON
162 lines
4.7 KiB
JSON
{
|
|
"format_version": "0.1",
|
|
"variables": {
|
|
"test_var": {
|
|
"value": "bar"
|
|
}
|
|
},
|
|
"planned_values": {
|
|
"outputs": {
|
|
"test": {
|
|
"sensitive": false,
|
|
"value": "bar"
|
|
}
|
|
},
|
|
"root_module": {
|
|
"resources": [
|
|
{
|
|
"address": "test_instance.test",
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"name": "test",
|
|
"provider_name": "registry.terraform.io/hashicorp/test",
|
|
"schema_version": 0,
|
|
"values": {
|
|
"ami": "bar",
|
|
"id": "placeholder"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"resource_changes": [
|
|
{
|
|
"address": "test_instance.test",
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"provider_name": "registry.terraform.io/hashicorp/test",
|
|
"name": "test",
|
|
"change": {
|
|
"actions": [
|
|
"update"
|
|
],
|
|
"before": {
|
|
"ami": "foo",
|
|
"id": "placeholder"
|
|
},
|
|
"after": {
|
|
"ami": "bar",
|
|
"id": "placeholder"
|
|
},
|
|
"after_unknown": {},
|
|
"after_sensitive": {},
|
|
"before_sensitive": {}
|
|
}
|
|
},
|
|
{
|
|
"address": "test_instance.test-delete",
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"provider_name": "registry.terraform.io/hashicorp/test",
|
|
"name": "test-delete",
|
|
"change": {
|
|
"actions": [
|
|
"delete"
|
|
],
|
|
"before": {
|
|
"ami": "foo",
|
|
"id": "placeholder"
|
|
},
|
|
"after": null,
|
|
"after_unknown": {},
|
|
"after_sensitive": false,
|
|
"before_sensitive": {}
|
|
}
|
|
}
|
|
],
|
|
"output_changes": {
|
|
"test": {
|
|
"actions": [
|
|
"create"
|
|
],
|
|
"before": null,
|
|
"after": "bar",
|
|
"after_unknown": false
|
|
}
|
|
},
|
|
"prior_state": {
|
|
"format_version": "0.1",
|
|
"values": {
|
|
"outputs": {
|
|
"test": {
|
|
"sensitive": false,
|
|
"value": "bar"
|
|
}
|
|
},
|
|
"root_module": {
|
|
"resources": [
|
|
{
|
|
"address": "test_instance.test",
|
|
"schema_version": 0,
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"name": "test",
|
|
"provider_name": "registry.terraform.io/hashicorp/test",
|
|
"values": {
|
|
"ami": "foo",
|
|
"id": "placeholder"
|
|
}
|
|
},
|
|
{
|
|
"address": "test_instance.test-delete",
|
|
"schema_version": 0,
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"name": "test-delete",
|
|
"provider_name": "registry.terraform.io/hashicorp/test",
|
|
"values": {
|
|
"ami": "foo",
|
|
"id": "placeholder"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"configuration": {
|
|
"root_module": {
|
|
"outputs": {
|
|
"test": {
|
|
"expression": {
|
|
"references": [
|
|
"var.test_var"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"resources": [
|
|
{
|
|
"address": "test_instance.test",
|
|
"mode": "managed",
|
|
"type": "test_instance",
|
|
"name": "test",
|
|
"provider_config_key": "test",
|
|
"schema_version": 0,
|
|
"expressions": {
|
|
"ami": {
|
|
"references": [
|
|
"var.test_var"
|
|
]
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"variables": {
|
|
"test_var": {
|
|
"default": "bar"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|