-
Feature Request
-
Resolution: Unresolved
-
Undefined
-
None
-
n/a
-
False
-
-
False
- What is the nature and description of the request?
The variables parameter in the cloud.terraform.terraform module should be set to no_log=True by default.
- Why does the customer need this? (List the business requirements here)
The variables parameter often includes sensitive data. While no_log=true can be set on the task level (as suggested in the module's documentation), this hinders efforts to debug module usage during the plan or apply stages of Terraform. It would make more sense just to define the variables parameters to be hidden (as some other Ansible modules do).
- How would you like to achieve this? (List the functional requirements here)
Provide a way to hide the variables parameter from being output during module usage while at the same time not setting no_log=true at a task level. The customer suggests setting it at the parameter level by default. A more complete solution would be to introduce a new parameter that could switch no_log on/off for the variables parameter, which would also allow us to keep the default to off if we desire.