Skip to content

Create ephemeral type for tfe_organization_token #1970

@robertpscully

Description

@robertpscully

Use-cases

In deploying HCP Terraform as a platform, the use of an Organization Token for managing platform resources (deploying projects, teams, etc.) is best practice.

When creating bootstrap configuration for an HCP Terraform organization, I would like for this token to be generated and set as the value_wo argument for a sensitive tfe_variable resource during the apply.

This tfe_variable would be associated with a tfe_variable_set scoped to a management project for the organization.

The end goal is to create a token for managing organization resources, which is rotated by a workflow operated by the owners team using an interactively generated short lived owner token.

No human should have to copy and paste this value from the UI, and there is no need for a human to be able to see this value from a statefile.

Attempted Solutions

No automated solution is available to achieve the automation of creating/rotating a 'zero-eyes' tfe_organization_token.

Proposal

Create a new ephemeral type for tfe_organization_token.

This has the same use case as the existing ephemeral type for tfe_team_token

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions