-
Notifications
You must be signed in to change notification settings - Fork 176
Description
Use-cases
In deploying HCP Terraform as a platform, the use of an Organization Token for managing platform resources (deploying projects, teams, etc.) is best practice.
When creating bootstrap configuration for an HCP Terraform organization, I would like for this token to be generated and set as the value_wo argument for a sensitive tfe_variable resource during the apply.
This tfe_variable would be associated with a tfe_variable_set scoped to a management project for the organization.
The end goal is to create a token for managing organization resources, which is rotated by a workflow operated by the owners team using an interactively generated short lived owner token.
No human should have to copy and paste this value from the UI, and there is no need for a human to be able to see this value from a statefile.
Attempted Solutions
No automated solution is available to achieve the automation of creating/rotating a 'zero-eyes' tfe_organization_token.
Proposal
Create a new ephemeral type for tfe_organization_token.
This has the same use case as the existing ephemeral type for tfe_team_token