skip variables with pattern '.*[password|secret].*'

nichtraunzer · Mar 23, 2022 · 85681c9 · 85681c9
1 parent c100812
commit 85681c9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/hooks/createi2o.sh b/hooks/createi2o.sh
@@ -25,10 +25,12 @@ if [ -f "${TFHFILE}" ] ; then
     rm -f "${TFHFILE}"
 fi
 
-TFDOCSHCL=$(terraform-docs tfvars json "${CWD}" | jq -r 'keys[] as $k | "\($k) = var.\($k)"' | indenttfo )
+TFDOCSHCL=$(terraform-docs tfvars json "${CWD}" | jq -r 'with_entries(select(.key | contains("password") or contains ("secret") |not)) | keys[] as $k | "\($k) = var.\($k)"' | indenttfo )
 
 cat > "${TFHFILE}" <<EOF
 # This file has been created automatically.
+# terraform variables are passed to outputs.
+# Following variable names are skipped: '.*[password|secret].*'.
 
 output "inputs2outputs" {
   description = "all inputs passed to outputs"