Merge pull request #561 from terraform-providers/f-compute-vpn-tunnel…

…-secret-sensitive r/compute_vpn_tunnel: Mark 'shared_secret' as sensitive
hashicorp · Oct 10, 2017 · 96ac825 · 96ac825
2 parents ee66f0b + 0e5b4b0
commit 96ac825
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/google/resource_compute_vpn_tunnel.go b/google/resource_compute_vpn_tunnel.go
@@ -34,9 +34,10 @@ func resourceComputeVpnTunnel() *schema.Resource {
 			},
 
 			"shared_secret": &schema.Schema{
-				Type:     schema.TypeString,
-				Required: true,
-				ForceNew: true,
+				Type:      schema.TypeString,
+				Required:  true,
+				Sensitive: true,
+				ForceNew:  true,
 			},
 
 			"target_vpn_gateway": &schema.Schema{

diff --git a/website/docs/r/compute_vpn_tunnel.html.markdown b/website/docs/r/compute_vpn_tunnel.html.markdown
@@ -11,6 +11,9 @@ description: |-
 Manages a VPN Tunnel to the GCE network. For more info, read the
 [documentation](https://cloud.google.com/compute/docs/vpn).
 
+~> **Note:** All arguments including the `shared_secret` will be stored in the raw state as plain-text.
+[Read more about sensitive data in state](/docs/state/sensitive-data.html).
+
 ## Example Usage
 
 ```hcl