feat(write-only): mark base field as sensitive during generation (#15240)

Author: ramonvermeulen

docs/content/reference/field.md

@@ -110,7 +110,7 @@ sensitive: true
 ### `write_only`
 Set to true to enable write-only functionality for this field.
 If true, the [**Write-only Arguments**](https://developer.hashicorp.com/terraform/plugin/sdkv2/resources/write-only-arguments) will be automatically generated by the code generator (`[field_name]_wo` and `[field_name]_wo_version`). 
-The base field should also be marked as `sensitive` so that the value is obscured in Terraform output but it will still be stored in state. (This is necessary for compatibility with Terraform <v1.11.) The write-only version of the field will be obscured in Terraform output and _won't_  be stored in state. See [Ephemerality in Resources - Use Write-only arguments](https://developer.hashicorp.com/terraform/language/resources/ephemeral/write-only) for more information.
+The base field will automatically be marked as `sensitive` so that the value is obscured in Terraform output but it will still be stored in state. (This is necessary for compatibility with Terraform <v1.11.) The write-only version of the field will be obscured in Terraform output and _won't_  be stored in state. See [Ephemerality in Resources - Use Write-only arguments](https://developer.hashicorp.com/terraform/language/resources/ephemeral/write-only) for more information.
 
 Example:
 

mmv1/api/resource.go

@@ -818,6 +818,7 @@ func buildWriteOnlyVersionField(name string, originalField *Type, writeOnlyField
 
 func (r *Resource) addWriteOnlyFields(props []*Type, propWithWoConfigured *Type) []*Type {
 	propWithWoConfigured.WriteOnly = false
+	propWithWoConfigured.Sensitive = true
 	if len(propWithWoConfigured.RequiredWith) > 0 {
 		log.Fatalf("WriteOnly property '%s' in resource '%s' cannot have RequiredWith set. This combination is not supported.", propWithWoConfigured.Name, r.Name)
 	}

mmv1/products/compute/VpnTunnel.yaml

@@ -178,7 +178,6 @@ properties:
     required: true
     ignore_read: true
     write_only: true
-    sensitive: true
   - name: 'sharedSecretHash'
     type: String
     description: |