App Service - Plan shows site_credentials in cleartext

[sebader]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform (and AzureRM Provider) Version

Terraform v0.12.26
azurerm v2.12.0

Affected Resource(s)

• azurerm_app_service

Expected Behavior

No credentials should ever be printed in the logs in cleartext

Actual Behavior

When terraform plan detects a change to an existing app service, it prints the site_credentials (password and username) in cleartext:

Steps to Reproduce

Make any changes that cause an existing app service to be updated by terraform and run plan.

1. terraform plan

[tombuildsstuff]

hi @sebader

Thanks for opening this issue.

Taking a look into this, the root cause of this appears to be this bug in the Terraform Plugin SDK - since this would be fixed there (rather than here) I'm going to close this issue for the moment - would you mind subscribing to that issue for updates? When the fix becomes available we'll pull it in and that should fix this.

Thanks!

[hbuckle]

@tombuildsstuff - there seems to be very little interest in fixing the issue on the SDK side (unless you know any different?). The response from @paultyng was

The definitive response is treat it all as sensitive.

Given that, can we look to mark the whole block as sensitive on the AzureRM provider side?

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!