Mark the whole replica_configuration as sensitive due to the private …

…keys.
GoogleCloudPlatform · Dec 26, 2023 · 1b1152d · 1b1152d
1 parent 7f448ef
commit 1b1152d
Showing 1 changed file with 5 additions and 7 deletions.
diff --git a/mmv1/third_party/terraform/services/sql/resource_sql_database_instance.go.erb b/mmv1/third_party/terraform/services/sql/resource_sql_database_instance.go.erb
@@ -775,35 +775,33 @@ is set to true. Defaults to ZONAL.`,
 			},
 
 			"replica_configuration": {
-				Type:     schema.TypeList,
-				Optional: true,
-				MaxItems: 1,
+				Type:       schema.TypeList,
+				Optional:   true,
+				MaxItems:   1,
 				// Returned from API on all replicas
-				Computed: true,
+				Computed:   true,
+				Sensitive:  true,
 				Elem: &schema.Resource{
 					Schema: map[string]*schema.Schema{
 						"ca_certificate": {
 							Type:         schema.TypeString,
 							Optional:     true,
 							ForceNew:     true,
 							AtLeastOneOf: replicaConfigurationKeys,
-							Sensitive:    true,
 							Description:  `PEM representation of the trusted CA's x509 certificate.`,
 						},
 						"client_certificate": {
 							Type:         schema.TypeString,
 							Optional:     true,
 							ForceNew:     true,
 							AtLeastOneOf: replicaConfigurationKeys,
-							Sensitive:    true,
 							Description:  `PEM representation of the replica's x509 certificate.`,
 						},
 						"client_key": {
 							Type:         schema.TypeString,
 							Optional:     true,
 							ForceNew:     true,
 							AtLeastOneOf: replicaConfigurationKeys,
-							Sensitive:    true,
 							Description:  `PEM representation of the replica's private key. The corresponding public key in encoded in the client_certificate.`,
 						},
 						"connect_retry_interval": {