Terraform: Add `secret` flag to variables

[keyneston]

Terraform allows you to prompt a user for info, like a password. It would be convenient if you could mark the field as a secret, such that the key was not encoded into the state and had to be reentered every time terraform ran.

[radeksimko]

Related issue: https://github.com/hashicorp/terraform/issues/516

[mitchellh]

I'd say this is close enough to a dup to #516.

[gserra-olx]

@tarrant @radeksimko
I disagree on this being a duplicate of #516, as that is covering stored secrets

I want to input a password, and I don't want it to be echoed on screen

can you please reopen this?

[inequity]

@mitchellh
I agree with @gserra-olx . For providers that don't support any sort of key based authentication (vSphere, Artifactory backend are the ones I'm familiar with) it's pretty reasonable to want to prompt for a password instead of storing it on disk, and not having it echoed to screen is fairly important.

[ChappIO]

I would like to see this feature as well. When running a deployment a need to provision my target machines with authentication to the primary server. I would like to alllow the person running the script to enter these credentials in a prompt since they use Terraform to spin up their own instances (and use their own accounts).

[jbroq]

Same here : credentials prompting and hiding the input password, thanks ;)

[hashibot[bot]]

I'm going to lock this issue because it has been closed for _30 days_ ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.