Skip to content

Conversation

wata727
Copy link
Member

@wata727 wata727 commented Mar 11, 2025

The ephemeral mark is introduced in Terraform v1.10. This change allows policies to use expr.ephemeral as well as expr.sensitive.

deny_non_ephemeral_password contains issue if {
	providers := terraform.providers({"password": "string"}, {})
	password := providers[_].config.password

	password.ephemeral == false

	issue := tflint.issue("password should be ephemeral", password.range)
}

TFLint v0.55+ is required to support ephemeral values, below that the ephemeral will always be false.

@wata727 wata727 force-pushed the add_support_for_ephemeral_mark branch from 6b147b3 to 4a13cc7 Compare March 11, 2025 06:53
The ephemeral mark is introduced in Terraform v1.10.
This change allows policies to use `expr.ephemeral` as well as
`expr.sensitive`.

TFLint v0.55+ is required to support ephemeral values,
below that the `ephemeral` will always be `false`.
@wata727 wata727 force-pushed the add_support_for_ephemeral_mark branch from 4a13cc7 to efa46f2 Compare March 11, 2025 06:58
@wata727 wata727 merged commit d920149 into main Mar 11, 2025
8 checks passed
@wata727 wata727 deleted the add_support_for_ephemeral_mark branch March 11, 2025 07:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

1 participant