Skip to content

initial commit for "terraform show -json-redacted"#38537

Draft
jweigand wants to merge 4 commits into
hashicorp:mainfrom
jweigand:feature/show-json-redacted
Draft

initial commit for "terraform show -json-redacted"#38537
jweigand wants to merge 4 commits into
hashicorp:mainfrom
jweigand:feature/show-json-redacted

Conversation

@jweigand
Copy link
Copy Markdown

@jweigand jweigand commented May 7, 2026

This adds a new flag -json-redacted to terraform show. This mimics the output of terraform show -json but redacts sensitive values. Historically, showing those sensitive values made sense when the assumption was that it was being executed in a machine readable context, but this becomes significantly more dangerous when being executed in an agentic context - hence this new flag.

Fixes #

Target Release

1.16.x

Rollback Plan

  • If a change needs to be reverted, we will roll out an update to the code within 7 days.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

CHANGELOG entry

  • This change is user-facing and I added a changelog entry.
  • This change is not user-facing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant