Hello!

The terraform 0.14 release includes a long awaited feature: the ability to mark input and output variables as sensitive. This is big news, and I want to try doing this ASAP. But as it is in beta I will have to install it on the ubuntu hosted agents, which come to find out is very straightforward:

- task: CmdLine@2
  inputs:
    script: |
      sudo apt-get install wget unzip -y
      sudo wget https://releases.hashicorp.com/terraform/0.14.0-beta2/terraform_0.14.0-beta2_linux_amd64.zip
      sudo unzip terraform_0.14.0-beta2_linux_amd64.zip
      sudo mv terraform /usr/local/bin/
      terraform -v
  
- script: terraform version
  displayName: Terraform Version

Of course, use beta software at your own peril… DigitalOcean have a post that covers Protecting Sensitive Data in Terraform quite nicely.

On the subject of Ubuntu hosted agents, they will soon be updated to 20.04. Nice.