kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: mark VPN module secret outputs as sensitive (#3864)

Browse Source
This commit is contained in:
davidspielmann
2026-04-13 18:05:06 +02:00
committed by GitHub
parent 6bfa7077a2
commit f7d74a6b1f
6 changed files with 27 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
modules/net-vpn-dynamic/README.md
View File

@@ -144,11 +144,11 @@ module "vpn-dynamic" {
| [gateway](outputs.tf#L22) | VPN gateway resource. | |
| [id](outputs.tf#L27) | Fully qualified VPN gateway id. | |
| [name](outputs.tf#L32) | VPN gateway name. | |
| [random_secret](outputs.tf#L37) | Generated secret. | |
| [router](outputs.tf#L43) | Router resource (only if auto-created). | |
| [router_name](outputs.tf#L48) | Router name. | |
| [self_link](outputs.tf#L53) | VPN gateway self link. | |
| [tunnel_names](outputs.tf#L58) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L66) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L74) | VPN tunnel resources. | |
| [random_secret](outputs.tf#L37) | Generated secret. | ✓ |
| [router](outputs.tf#L44) | Router resource (only if auto-created). | |
| [router_name](outputs.tf#L49) | Router name. | |
| [self_link](outputs.tf#L54) | VPN gateway self link. | |
| [tunnel_names](outputs.tf#L59) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L67) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L75) | VPN tunnel resources. | |
<!-- END TFDOC -->

1
modules/net-vpn-dynamic/outputs.tf
View File

@@ -37,6 +37,7 @@ output "name" {
output "random_secret" {
description = "Generated secret."
value = local.secret
sensitive = true
}

20
modules/net-vpn-ha/README.md
View File

@@ -333,14 +333,14 @@ You can optionally avoid to specify MD5 keys and the module will automatically g
| [external_gateway](outputs.tf#L25) | External VPN gateway resource. | |
| [gateway](outputs.tf#L30) | VPN gateway resource (only if auto-created). | |
| [id](outputs.tf#L35) | Fully qualified VPN gateway id. | |
| [md5_keys](outputs.tf#L42) | BGP tunnels MD5 keys. | |
| [name](outputs.tf#L53) | VPN gateway name (only if auto-created). | |
| [random_secret](outputs.tf#L58) | Generated secret. | |
| [router](outputs.tf#L63) | Router resource (only if auto-created). | |
| [router_name](outputs.tf#L68) | Router name. | |
| [self_link](outputs.tf#L73) | HA VPN gateway self link. | |
| [shared_secrets](outputs.tf#L78) | IPSEC tunnels shared secrets. | |
| [tunnel_names](outputs.tf#L86) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L94) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L102) | VPN tunnel resources. | |
| [md5_keys](outputs.tf#L42) | BGP tunnels MD5 keys. | ✓ |
| [name](outputs.tf#L54) | VPN gateway name (only if auto-created). | |
| [random_secret](outputs.tf#L59) | Generated secret. | ✓ |
| [router](outputs.tf#L65) | Router resource (only if auto-created). | |
| [router_name](outputs.tf#L70) | Router name. | |
| [self_link](outputs.tf#L75) | HA VPN gateway self link. | |
| [shared_secrets](outputs.tf#L80) | IPSEC tunnels shared secrets. | ✓ |
| [tunnel_names](outputs.tf#L89) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L97) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L105) | VPN tunnel resources. | |
<!-- END TFDOC -->

3
modules/net-vpn-ha/outputs.tf
View File

@@ -41,6 +41,7 @@ output "id" {
output "md5_keys" {
description = "BGP tunnels MD5 keys."
sensitive = true
value = {
for k, v in var.tunnels :
k => try(v.bgp_peer.md5_authentication_key, null) == null ? {} : {
@@ -58,6 +59,7 @@ output "name" {
output "random_secret" {
description = "Generated secret."
value = local.secret
sensitive = true
}
output "router" {
@@ -77,6 +79,7 @@ output "self_link" {
output "shared_secrets" {
description = "IPSEC tunnels shared secrets."
sensitive = true
value = {
for k, v in var.tunnels
: k => coalesce(v.shared_secret, local.secret)

10
modules/net-vpn-static/README.md
View File

@@ -109,9 +109,9 @@ module "vpn" {
| [gateway](outputs.tf#L22) | VPN gateway resource. | |
| [id](outputs.tf#L27) | Fully qualified VPN gateway id. | |
| [name](outputs.tf#L32) | VPN gateway name. | |
| [random_secret](outputs.tf#L37) | Generated secret. | |
| [self_link](outputs.tf#L42) | VPN gateway self link. | |
| [tunnel_names](outputs.tf#L47) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L55) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L63) | VPN tunnel resources. | |
| [random_secret](outputs.tf#L37) | Generated secret. | ✓ |
| [self_link](outputs.tf#L43) | VPN gateway self link. | |
| [tunnel_names](outputs.tf#L48) | VPN tunnel names. | |
| [tunnel_self_links](outputs.tf#L56) | VPN tunnel self links. | |
| [tunnels](outputs.tf#L64) | VPN tunnel resources. | |
<!-- END TFDOC -->

1
modules/net-vpn-static/outputs.tf
View File

@@ -37,6 +37,7 @@ output "name" {
output "random_secret" {
description = "Generated secret."
value = local.secret
sensitive = true
}
output "self_link" {