The terraform 0.14 release includes a long awaited feature: the ability to mark input and output variables as sensitive. This is big news, and I want to try doing this ASAP. But as it is in beta I will have to install it on the ubuntu hosted agents, which come to find out is very straightforward:
- task: [email protected] inputs: script: | sudo apt-get install wget unzip -y sudo wget https://releases.hashicorp.com/terraform/0.14.0-beta2/terraform_0.14.0-beta2_linux_amd64.zip sudo unzip terraform_0.14.0-beta2_linux_amd64.zip sudo mv terraform /usr/local/bin/ terraform -v - script: terraform version displayName: Terraform Version
Of course, use beta software at your own peril… DigitalOcean have a post that covers Protecting Sensitive Data in Terraform quite nicely.
On the subject of Ubuntu hosted agents, they will soon be updated to 20.04. Nice.