terraform-provider-databricks
terraform-provider-databricks copied to clipboard
Issue with secret import and export using terraform exporter
Configuration
Terraform { required_providers { databricks = { source = "databricks/databricks" version = "1.34.0" } } }
Expected Behavior
Secrets should get imported and exported with any issues
Actual Behavior
Exports are happing using the terraform exporter but it is asking for secret name and secret values at runtime while importing
Steps to Reproduce
- Create some secrets in primary workspace
- export the same using terraform exporter
- Import the same to secondary workspace using the exporter
- while the import starts , it asks the secret value and secrt name, which is not the ideal case due to following: - Chances of user tampering the secret name at runtime - Chances of user tampering the secret value at runtime - Exposure of secrets to the user running the exporter
Terraform and provider versions
Is it a regression?
Debug Output
Important Factoids
Would you like to implement a fix?
It's actually documented behavior: https://registry.terraform.io/providers/databricks/databricks/latest/docs/guides/experimental-exporter#secrets