feature: Add ephemeral resource for provider resources

[rhughes1]

Proposal

As part of Terraform 1.10 ephemeral resources feature, there should be ephemeral resources for the following:

• Organization tokens: This is to resolve the token being stored in the Terraform state file.
• Team tokens: This is to resolve the token being stored in the Terraform state file.
• Workspace/variable set variables: This is to resolve any sensitive values that need to be set and not stored in the Terraform state file.
• Policy parameters: This is to resolve any sensitive values that need to be set and not stored in the Terraform state file.
• Agent pool tokens: This is to resolve the token being stored in the Terraform state file.
• Workspace runs: This is similar to the aws_lambda_revocation ephemeral resource

This applies to the following resources:

tfe_workspace_run tfe_variable tfe_test_variable tfe_team_token tfe_policy_set_parameter tfe_organization_token tfe_agent_token

[trutled3]

Is this slated for an upcoming release of the provider? If not, I would like to throw my hat in the ring and contribute this change.

[brandonc]

@trutled3 Sorry for the delayed response but we have an internal effort to implement these as ephemeral resources and they will be coming to an upcoming provider release. Likely in the next month or two. Thanks for the offer!

[priestjim]

@brandonc reviving this issue to ask if there's planned ephemeral support for tfe_workspace_run as it would be great to be able to trigger runs for downstream Terraform workspaces based on changing conditions between runs, without necessarily needing to store the triggered runs in state (e.g gating downstream triggers behind a variable)