Support sensitive output

Author: jtyr

api/v1alpha1/workspace_types.go

@@ -40,6 +40,9 @@ type OutputSpec struct {
 	// Attribute name in module
 	// +optional
 	ModuleOutputName string `json:"moduleOutputName"`
+	// Sensitive value
+	// +optional
+	Sensitive bool `json:"sensitive,omitempty"`
 }
 
 // OutputStatus outputs the values of Terraform output

config/crd/bases/app.terraform.io_workspaces.yaml

@@ -125,6 +125,9 @@ spec:
                     moduleOutputName:
                       description: Attribute name in module
                       type: string
+                    sensitive:
+                      description: Sensitive value
+                      type: boolean
                   type: object
                 type: array
               runTriggers:

workspacehelper/terraform.go

@@ -33,6 +33,7 @@ func CreateTerraformTemplate(workspace *v1alpha1.Workspace) ([]byte, error) {
 	{{- range .Spec.Outputs}}
 	output "{{.Key}}" {
 		value = module.operator.{{.ModuleOutputName}}
+		sensitive = {{.Sensitive}}
 	}
 	{{- end}}
 	module "operator" {

workspacehelper/terraform_test.go

@@ -145,9 +145,15 @@ func TestShouldCreateTerraformWithOutputs(t *testing.T) {
 	}
 	output "module_output" {
 		value = module.operator.my_output
+		sensitive = false
 	}
 	output "ip" {
 		value = module.operator.ip_address
+		sensitive = false
+	}
+	output "password" {
+		value = module.operator.my_password
+		sensitive = true
 	}
 	module "operator" {
 		source = "my_source"
@@ -174,6 +180,11 @@ func TestShouldCreateTerraformWithOutputs(t *testing.T) {
 					Key:              "ip",
 					ModuleOutputName: "ip_address",
 				},
+				{
+					Key:              "password",
+					ModuleOutputName: "my_password",
+					Sensitive:        true,
+				},
 			},
 		},
 	}

workspacehelper/tfc_output.go

@@ -151,14 +151,12 @@ func (t *TerraformCloudClient) GetOutputsFromState(stateDownloadURL string) ([]*
 	outputValues := file.State.Modules[""].OutputValues
 	outputs := []*v1alpha1.OutputStatus{}
 	for key, value := range outputValues {
-		if !value.Sensitive {
-			if err != nil {
-				return outputs, fmt.Errorf("output value could not be converted to string, Error, %v", err)
-			}
-			statusValue := convertValueToString(value.Value)
-			if statusValue != "" {
-				outputs = append(outputs, &v1alpha1.OutputStatus{Key: key, Value: statusValue})
-			}
+		if err != nil {
+			return outputs, fmt.Errorf("output value could not be converted to string, Error, %v", err)
+		}
+		statusValue := convertValueToString(value.Value)
+		if statusValue != "" {
+			outputs = append(outputs, &v1alpha1.OutputStatus{Key: key, Value: statusValue})
 		}
 	}
 	return outputs, nil