Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Handle Sensitive Zarf Vars #901

Open
TristanHoladay opened this issue Sep 5, 2024 · 0 comments
Open

Handle Sensitive Zarf Vars #901

TristanHoladay opened this issue Sep 5, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@TristanHoladay
Copy link
Collaborator

Zarf Variables can be specified as sensitive in a Zarf package yaml. Ensure that we check if any Zarf vars are sensitive and if so mask them in uds output.

Some considerations:
This requires loading the zarf package metadata, which we can use loadPackage() from inspect.go for. That means we're now loading packages at two points in the deployment flow -- pre-deploy views and actual deployment.

Alternate Options:
We don't display any Zarf vars and their values in the pre-deploy view. When the bundle deploys, each package definition with its vars and their current values are displayed and Zarf already handles masking the sensitive values in that output.

@TristanHoladay TristanHoladay added the enhancement New feature or request label Sep 5, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant