Merge pull request #38 from carolinetaymor-qz/caroline/n9-sensitive-user-data

nandajavarma · web-flow · commit ac3a34efd5d4 · 2026-05-12T15:02:48.000+02:00
Wrap `user-data` with `sensitive()` to redact rendered cloud-init in plan output
diff --git a/proxy-vm.tf b/proxy-vm.tf
@@ -105,7 +105,7 @@ resource "google_compute_instance_template" "proxy" {
     block-project-ssh-keys       = "TRUE"
 
     # Cloud-init configuration for proxy setup
-    user-data = data.cloudinit_config.proxy.rendered
+    user-data = sensitive(data.cloudinit_config.proxy.rendered)
 
     "cos-metrics-enabled" = "true"
   }
diff --git a/runner-vm.tf b/runner-vm.tf
@@ -236,7 +236,7 @@ resource "google_compute_instance_template" "runner" {
     block-project-ssh-keys       = "TRUE"
 
     # Cloud-init configuration for Prometheus setup
-    user-data = data.cloudinit_config.runner.rendered
+    user-data = sensitive(data.cloudinit_config.runner.rendered)
 
     "cos-metrics-enabled" = "true"
   }

Original file line number	Diff line number	Diff line change
`@@ -105,7 +105,7 @@ resource "google_compute_instance_template" "proxy" {`
`105`	`105`	`block-project-ssh-keys = "TRUE"`
`106`	`106`
`107`	`107`	`# Cloud-init configuration for proxy setup`
`108`		`- user-data = data.cloudinit_config.proxy.rendered`
	`108`	`+ user-data = sensitive(data.cloudinit_config.proxy.rendered)`
`109`	`109`
`110`	`110`	`"cos-metrics-enabled" = "true"`
`111`	`111`	`}`
Original file line number	Diff line number	Diff line change
`@@ -236,7 +236,7 @@ resource "google_compute_instance_template" "runner" {`
`236`	`236`	`block-project-ssh-keys = "TRUE"`
`237`	`237`
`238`	`238`	`# Cloud-init configuration for Prometheus setup`
`239`		`- user-data = data.cloudinit_config.runner.rendered`
	`239`	`+ user-data = sensitive(data.cloudinit_config.runner.rendered)`
`240`	`240`
`241`	`241`	`"cos-metrics-enabled" = "true"`
`242`	`242`	`}`