terraform-provider-databricks icon indicating copy to clipboard operation
terraform-provider-databricks copied to clipboard

Issue with secret import and export using terraform exporter

Open WAG10 opened this issue 1 year ago • 1 comments

Configuration

Terraform { required_providers { databricks = { source = "databricks/databricks" version = "1.34.0" } } }

Expected Behavior

Secrets should get imported and exported with any issues

Actual Behavior

Exports are happing using the terraform exporter but it is asking for secret name and secret values at runtime while importing

Steps to Reproduce

  1. Create some secrets in primary workspace
  2. export the same using terraform exporter
  3. Import the same to secondary workspace using the exporter
  4. while the import starts , it asks the secret value and secrt name, which is not the ideal case due to following: - Chances of user tampering the secret name at runtime - Chances of user tampering the secret value at runtime - Exposure of secrets to the user running the exporter

Terraform and provider versions

Is it a regression?

Debug Output

Important Factoids

Would you like to implement a fix?

WAG10 avatar Feb 14 '24 06:02 WAG10

It's actually documented behavior: https://registry.terraform.io/providers/databricks/databricks/latest/docs/guides/experimental-exporter#secrets

alexott avatar Feb 14 '24 09:02 alexott